last executing test programs: 5m19.764763015s ago: executing program 32 (id=237): perf_event_open(&(0x7f0000000500)={0x4761fcf2f41dfbce, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6469a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x400, 0x2}, 0x0, 0x35, 0x3, 0x8, 0x9, 0x9, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_setup(0x0, &(0x7f0000000040)) clock_gettime(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r7) socket$inet(0x2, 0x2, 0x1) 4m31.203972854s ago: executing program 5 (id=587): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4m30.175452841s ago: executing program 5 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 4m30.140926512s ago: executing program 5 (id=591): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x6, 0x35a1, 0xfffffffd, 0x1, 0x1, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x10ffe, 0x0, 0x101, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, r3, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x77) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) 4m29.674463669s ago: executing program 0 (id=599): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4m29.61903172s ago: executing program 0 (id=600): alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x1811, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0xb00, 0x0) ioctl$TIOCMBIC(r8, 0x5417, 0x0) syz_open_procfs(r6, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000d80), 0x0, 0x8080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 4m28.700837485s ago: executing program 5 (id=601): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4ef, &(0x7f0000000740)="$eJzs3E1oXEUcAPD/2yRN0g8ba622Vk2tYrCYtGm1PQhSUfCgIFZQjyEfJTZtpEnBlipbkHqUonfx6NWDV/VSxJPgtR4FKRTppa0grrzdt5/d3aTJJmvs7webnXnz3puZnTcv82aSDeC+NZz+SErhaxGxPSJyjTsMl95u37w4eefmxcnIFwon/kyKh91K45nsNLEli4zkInKfJtWEGgvnL5yamJubPpvFxxZPfzi2cP7C87MD2ZZjx44cPnT0xfEX7r1STfJL63Vrzyfze3e//v6VNyd7y9vLudXWo1OGY7hZUYqe6XRmXbatJpz0ttqrPmHzWhaIZRnIWqWv2P+3R0+0bLyIyK9jyYC1VigUCv2tk/OFRpfu2gJsWEl0uwRAd5R/0afPv+VXs4HAptrI9o4OQbrqxvHSA1Ba79vZK+LJ4sbyPEhfw/NtJw1HxHv5v75KX7FG8xAAALV+OF6Z/qkf/w2VVkb+Pnf15fT9gWzYNxQRD0bEjoh4KCJ2RsTDEbErIh6JiEcbzt8TEYU2+Q83xCv5Vxahctc7UM2WbhwfjJeyta3q+K+uAEM9WWxbRHnAPH0w+0xGoq9/ZnZu+lCbPH589dfPW6XVjv/SV5p/eSyYleN6b8ME3dTE4sSKK9zgxqWIPb2N9U96I5LKSkASEbsjYs8yzvdF9j5Us232uW/2ViJ99fsvXf+iQtN1tHZLFctU+Dri2VL756Ou/as5JnXrk6cnTk6fnD4zXlmfHBuIuemDYzMtS/PzL5ffapW2ZP2/+73xkNeOfn8i61mrl7b/5prrP8rrt9X6DyURSWW9dqHZWQba5nH5t89aPtOs9PrflLxTDJefSz+aWFw8eyhiU/LG3dvHq8eW4+l75Ev1H9nfvP/vyI5JP4nHIiK9iB+PiCei9ISYln1fRDwVEfvb1P+nV57+YOX1X1tp/aca7n+llq9r/+p6fatAkq0NNknqObXv2p0WN4/ltf+RYmgk2zJ1tdmZkrpbRKuSluc90i3/rPKzAwAAgI0iFxFba+aStkYuNzpamgPaGZtzc/MLiwdm5s+dmUrTIoaiLzczO1ec/yzNB/cl5fnPoZr4eEP8cDZv/GXPYDE+Ojk/N9XVmgNbin0+yY1GvNtT0/9Tf3Rmihn4L+vAOhqwQbXr/+kgfteVdSwMsK6W//v/6sdrWhBg3dX0/1b/4Z9v+ndfwIbn+R+oWvqLftwzYOMr6MtwX7un/n/AlwDC/0lvvF0J57paEmC9Gf/DfWnJ/+tfVaDQ3zxpIO7eOQban7AnVlaMwSZ5dSWQjqy6kvvgSo4qf5tCy30id28n7I/OtOnMKj+N/NmFk7s6fvEXsr+V73QLfrsu/bRZoCu3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI77NwAA///sotgS") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) sched_setattr(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.'], 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e20, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfffffffffffffffd, 0x9, 0x6, 0xffff, 0x8251c, 0x9, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x4, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) socket$inet(0xa, 0x801, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x200, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5}, @in6=@remote, {@in=@loopback, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x40003505, 0x2, 0x3, 0xab, 0x3, 0x1, 0x9}]}]}, 0x16c}}, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="182b3af7ffffffffffffff00000000001800000000000000000000000000060095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m27.395441866s ago: executing program 0 (id=603): socket(0x1e, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000004000000040000000200010000180000", @ANYRES32, @ANYBLOB="0000000000000000000000000000e2366addc65bfa4554cb6a2fbd61062649418dfdda4c44b539ac4664a7c44c75ff2aac9553768238c3f1abf7ce09182583f9ef5b8d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RXATTRCREATE(r2, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 4m26.806332205s ago: executing program 5 (id=606): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0xf773, "f8ffffffff1c1000201b14700c1e0ac74f00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x26e8, @empty, 0x400000}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="a7", 0x1, 0x2400c040, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 4m23.45916304s ago: executing program 5 (id=614): alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x1811, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0xb00, 0x0) ioctl$TIOCMBIC(r8, 0x5417, 0x0) syz_open_procfs(r6, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000d80), 0x0, 0x8080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 4m23.377469201s ago: executing program 0 (id=615): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x1000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@errors_continue}, {@noauto_da_alloc}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@errors_continue}, {@noauto_da_alloc}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x2a, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x1c, r0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}]}, 0x1c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='\x00', &(0x7f00000003c0), 0x400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m23.350523922s ago: executing program 33 (id=614): alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x1811, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0xb00, 0x0) ioctl$TIOCMBIC(r8, 0x5417, 0x0) syz_open_procfs(r6, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000d80), 0x0, 0x8080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 4m23.075423957s ago: executing program 0 (id=617): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x9b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x8c89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x7df2, 0x7724, 0x1e, 0x0, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r5) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x1, 0x566, &(0x7f0000000540)="$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") unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x28, r6, 0x101, 0x70b926, 0x25dfcc00, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xbb}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xe}}, {@noblock_validity}, {@nodelalloc}, {@abort}, {@errors_remount}, {@nodiscard}]}, 0xfd, 0x461, &(0x7f0000001840)="$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") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x40800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x0, 0x1a0, 0xfeffffff, 0x270, 0x270, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 4m21.954107065s ago: executing program 0 (id=627): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000011e000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x5) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") rmdir(&(0x7f00000001c0)='./file0\x00') io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m6.898183909s ago: executing program 34 (id=627): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000011e000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x5) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") rmdir(&(0x7f00000001c0)='./file0\x00') io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m7.262320951s ago: executing program 6 (id=1051): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x6, 0x8, 0x9b9b, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000800) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x2e, 0x5f, 0x61]}}, 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 3m7.088275524s ago: executing program 6 (id=1053): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000005600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00}}}], 0x38, 0x40000}}], 0x1, 0x850) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa00000000000000000800030004000000200004000a004e2300000005fe88000000000000000000000000010100100000060005000121000098000980940000800600010002000000080002007f0000010500030000000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e000000205000300030000000600010002000000080002007f0000010500030003000000200004000a004e220000000dff020000000000000000000000000001020000000800030002000000c4000080240002007dc2e1ed365e02e2513ddefadb5de99be4d95fbf6f0b98b29ab06005070592c8200004000a004e2300010001ff0200000000000000000000000000010000000024000200a38ae58757ed082bbaf191266cd5eb3c1344d5c85f7027ed57243ad50f65917924000100000000000000000000000000000000000000000000000000000000000000000024000200d480776c593a9340566d58a953561005070bd09967d97ee699d5643ffb8edcd2080009800400008008000a"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(r6, &(0x7f0000000200), 0x20) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x22b0ad05fed386dc}, 0x4000010) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000004c0)={0x0, 0x3f, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 3m6.763176979s ago: executing program 6 (id=1054): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @random="000000113aed", @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x30, 0x3a, 0xff, @private1, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x60, '\x00', {0x7, 0x6, "cadaf7", 0x0, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x4000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10004, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xa}, {0x7, 0x9}, {0xb, 0xf}}}, 0x24}}, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x304b1, 0x30000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xa036}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f00000001c0), 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000900000004000000020000060400000003000000000000000500000000000000000000615f572e"], 0x0, 0x3d, 0x0, 0x1}, 0x28) recvfrom$packet(r3, &(0x7f0000000400)=""/165, 0xa5, 0x4102, &(0x7f00000004c0)={0x11, 0x11, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) 3m4.674096661s ago: executing program 6 (id=1068): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4000000000000007910480000000000630abfff000000009500000000000000722485677d8501b3e715f748dc974b27f332cd007d36f6b531c94ea39b897c4dce145dc3592e56037e0c541344d7f51d8787fe7eed92597b41c226fba23bbae4302baff256d316bcae34b5867a665051b42b0115085669de9c9ef47d"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000ac0)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x8}, 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@nogrpid}, {@usrjquota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="4867ca4ed54e9e757bd0f8f04a0ff6c9a0b50c4e042a5b52dd784aa62336483d4511091725c80f50", 0x28}, {0x0}], 0x2, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100}}}], 0x38}}], 0x3, 0x48000) ioprio_set$uid(0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000005b00)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000840000000100000027007f000100000003f3000008000000000000000600000007000000", @ANYRES32, @ANYBLOB="1800000000000000840000000000000000000000ff01000018000000000000008400000007"], 0x60, 0x4000000}], 0x1, 0x20040099) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xb, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffa}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x3, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x4d98, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0xf3509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x0, 0x80000000, 0x4, 0x120000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r5) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="080002000100000008ff0800001a00006e"], 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newqdisc={0x8c, 0x24, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0x7}, {0xffff, 0xfff1}, {0xfff3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x60, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x4, 0x7}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x10000}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x8}, @TCA_RED_FLAGS={0xc, 0x4, {0xc, 0x7}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x1}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x4}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6355}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3c0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1854000001000000000000000000000d18490000020000000000000022c5036f4a00000000950000853c91f4cdbbb350e9953656717c4f408bdda9e85065b57abd36d532d08692fcb4239c39e2c60fd5a4034b57e30fa8812d01f6d867eb79c59a227249da6f63d238f49c668c8c8055ccf287ab0fa02c4b81b08e60ae52a604f1c917e41a7bd5a6bbfcf3f8040916eb946fc9de44e9baa083f2a4a17a9b765239497ddfbf914401ed018700f6eb2e99592e3f2575f2bcddced236fa94ed6b42522aa35e32d63bb4e4203903e37d95"], &(0x7f00000000c0)='GPL\x00', 0x15c95, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x14, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xe, 0x4, 0x4}, 0x10, r8, r1, 0x6, 0x0, &(0x7f0000000800)=[{0x5, 0x2, 0x1, 0xb}, {0x5, 0x2, 0xf, 0xa}, {0x2, 0x5, 0x5, 0x5}, {0x2, 0x800001, 0x8, 0x9}, {0x4, 0x5, 0x5, 0xc}, {0x3, 0x1, 0xd, 0xc}], 0x10, 0x3}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 3m2.925818898s ago: executing program 6 (id=1074): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xa00, 0xed7, 0x5, 0x9, 0x2, 0x1d, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x9, 0x400007, 0xc, 0x7, 0x7583}}}}]}, 0x78}}, 0x20040040) sendto$packet(r4, &(0x7f00000001c0)="fad33075218151db00316f3a277fedbc86dd46fe766f486d7cea18d5be2cf4380cc23be5", 0x24, 0x20000890, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xda, 0x6, @random="07000000900c"}, 0x14) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x541c, &(0x7f0000000fc0)) dup(r8) getsockname(r2, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x11}, 0x0, 0x0, 0x7, 0x0, 0x5bb, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000001440)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) 3m2.348080527s ago: executing program 6 (id=1081): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x411, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc081}, 0x804) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0xe0110000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0xfc, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) 3m2.347775847s ago: executing program 35 (id=1081): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x411, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc081}, 0x804) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0xe0110000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0xfc, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) 1m35.420127488s ago: executing program 4 (id=1450): r0 = syz_ublk_setup_io_uring(0x3e9d, &(0x7f0000000100)={0x0, 0x6e1e, 0x8, 0x3, 0x267}, &(0x7f0000000300), &(0x7f0000000380), &(0x7f0000000400)) io_uring_setup(0x4f41, &(0x7f0000000200)={0x0, 0xfffffffe, 0x2000, 0x0, 0x15d, 0x0, r0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0x4, 0xfffffff8) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22, 0x39b, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fsopen(&(0x7f00000003c0)='debugfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1m34.333923255s ago: executing program 4 (id=1453): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0xa) syz_ublk_setup_io_uring(0x74cb, &(0x7f0000000240)={0x0, 0xb3d, 0x2000, 0x2, 0x1a0, 0x0, r3}, &(0x7f0000000300), &(0x7f00000003c0), &(0x7f0000000400)) 1m32.146186859s ago: executing program 4 (id=1462): socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x5, 0x8, 0x5, 0x0, 0x0, 0x4030, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7}, 0x410, 0x2, 0x200, 0x4, 0x3, 0x4, 0x2, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x9) ioctl$TCSETSW2(0xffffffffffffffff, 0x5432, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x646, &(0x7f0000000700)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJffjUjX11YRcFC3Yh4qKhSWro9AdJCrYWTMCFgoKI2yLd+A+4l+7diaDuXAtVpGJBS+dx79xpJpP5lR8zk+R+PjCZc889k3O+uXNyz713ztwASms++5FGvBvx+kYSMdu0bibqK+eLci/+/fhm9kiiVvvuv5JIirxG+aR4PlcsTEbEny5HfLqyv97Nh49uL1drdT+JuLB15/6FzYePPli/s3xr9dbq3aWLX/vwo8WvL3241NTQwztXPF+5+p3P//KnP/zq2p+rHyRxKa6P/3glWuI4LvMxH6+LEJvzxyLioyzR5u9y2pyBEEqtUrwfxyPiszEblXypbjbWfzHSxgEDVatE1LpLehUATivdG8qqMQ5oHNv3dxx8fcCjkuF5/nH9AGh//GPFKYfJ/Nho+kXSdGRUP7dx/hjqz+p49XjyyavHc09iz3mIl2+2ztgx1NPJ9k5EfK5d/EnetvN5pFn86Z5j/TQiFiNiomjft47QhqQpPYjzMN0cJP7m7ZDFf6l4zvIvH7L+1tNaw44fgHJ69nGxI9/Olnb3f9nYozH+iTbjn5mjX5LJjXr/13n819jfT+bjnrRlHJaNWa61/5XjrRl///mVX3eqvz7+m3vSeGT1N8aCw/B8J2KuJf6fZcEW458s/qTN9s+K3LjUXx3f/ss/r3RaN+r4a08j3mt7/LM7Ks1SXa5PXlhbr64u1n+2reMPf/zB7zrV3z7+twYQaXvZ9p/uEH/T9k9bX5f9Te63/5U7rRm/v/b0Tqf6Z3pu//QfE0n9eHOiyPnRztbWxlLERHK1KFLkL29tbVzsHm+9zMta/rxUj//9L7Xv/3ve/y1RTTX+Zfbh/vduv+i07jDv/6aLya9rfbahkyz+ld7bf1//z/J+1Wcd//3+gy90Wtct/qmjBAYAAAAAAAAllObXYJN04U06TRcW6vNlPxPTafXe5taX1+49uLsS8X7+ecjxNNIk/8jIbH05WVuvri4Vn4dtLF9sWf5KRLwTEb+pTOXLCzfvVVdGHTwAAAAAAAAAAAAAAAAAAACcEOeK+f+N+1T/p1Kf/w+URO8bzO27/wNwRgzyBpPAyZb3/267+LeH1xZguOz/obz0fygv/R/KS/+H8jp0/5853nYAw2f/D+Wl/0N56f8AAAAAcCa988Vnf0siYvsbU/kjM1GsM+kXzrbxA5WuDKwdwPDp0VBeby79G+xD6fQ1/v9f8eWAg28OMAJJu8x8cFDr3vmftX3lrp2jtw0AAAAAAAAAAAAAqHvv3c7z/w82Nxg4bUz7g/I6wvx/Xx0Ap5yv/ofycowP9JjFH5OdVvSa/w8AAAAAAAAAAAAAHJuZ/JGkC8Vc4JlI04WFiE9FxPkYT9bWq6uLEfF2RPy1Mv5Wtrw06kYDAAAAAAAAAAAAAAAAAADAGbP58NHt5Wp1daM58f99OWc70bgLau/CtT7KdE18Mw74qkiG/2eZioiRb5SBJcaacpKI7WzLn4iGbWzGyWhGnhjxPyYAAAAAAAAAAAAAAAAAACihprnH7c39dsgtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDh273/f4/EynT9BX0V3psYdYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn0SQAAAP//Gq88Qw==") setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3e8, 0xe8, 0xe8, 0xe8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x5, 0x1, 0x1, 0x0, "247ac4067fed6b7983c0735464dc42c6bc6ea6c4c742b38fb6ba9123c34eb70fa0fd51d019706e73cf1a27baeb6f54c674c9ddca79751b9619874193362e2e04"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) clock_gettime(0xfffffffffffffffd, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 1m30.980537977s ago: executing program 4 (id=1468): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local, 0x8000000, 0x0, 0xff, 0x3, 0x0, 0x11}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x7000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10fcc8, 0x10001, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000"], 0xfe44, 0x0) 1m30.875400318s ago: executing program 3 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x7, 0xa9, 0x5, 0x2, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 1m29.46311661s ago: executing program 4 (id=1476): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 1m28.311347718s ago: executing program 3 (id=1478): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000007000c0000000000000005000000020000000000000700000000005f613f00"], 0x0, 0x29, 0x0, 0x1, 0x296}, 0x28) open(0x0, 0x3d8843, 0x190) r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001340)='./file1\x00', 0x210000, &(0x7f0000001040)={[{@nobarrier}, {@dioread_lock}, {@errors_remount}, {@nolazytime}, {@nolazytime}, {@usrjquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) mknod$loop(&(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_setup(0x1, &(0x7f0000000400)=0x0) io_destroy(r3) io_cancel(r3, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000001480)="9d4c42d0f6210eea9247eae3231577c67a1d4af312ba667080d5f3c0ad22de166069dff4236cce92b9a2d176ddca1a6c74d108d088e9aa9ef4b26230f45b969b55", 0x41, 0x3, 0x0, 0x3}, &(0x7f0000001540)) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r1}]) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000001380)={'syz', 0x1}, &(0x7f00000013c0)="fcd4be964bcb89795a37dfa1680ece9fce5cc9b372ab9000010c120f0ed5e7c33aee51e0551595702598b1dc847267252fb6fac290da9af77a9eba85d19d9760477183ae3af6ae7d637ec4f5576b15fa34d6cbae947a5bb36e09154af1f4265d9f4511815463094dcc2b37b68eb7538c67aa0fe3a50d6e055b1b2c4282ead3db15348cdd72914b5e68b03ebfc9895fc6c42f7dc1192adbd94043ba", 0x9b, r4) write(r5, &(0x7f0000000280)="0d9cdca9632436cdf30962a0f62e2238b6478ec224546b2b6f300ba837a69643328ccd6733c1ee29ff2669476cddeb54672cdb21bffa56985e431ade062bf1d68741eaa93a035de600377b0a35e3ee941f02efaf1958272dc9a1ea2358cbb8bfa982837a2155079430ccc71e0b14ca17de66f2cc5eeb3489a3fe23f11f92cceb857a9578abb3868e09f189adbe5a2947e106977bfd5351441c88557c64480381ab9f7a1213c87e718597e704dd5139a4beeba9c071be2ce7553429f97bb573ac60c6535bd837336e11a4ca7253b7faac4328a9aeddc23bb6d6139168ae605b6a5a20c373c542ce4c2492843ada4f8a2b53efa9792121fc48bb5c81a2b1c3a675d8f6cfb939377d8349cbb3ae06a64dbeeb7698cb76b1ca519a0cda0969eaf711576b981336bb361bbe0d493b5f20bd0e9e20af2542e80bcd96459715caa61aab0eaf80e05d5d9e5489e38ff672e90086d14e8dcb356ef43fd7c7a85f0831d7587b56b7223cbb305f5ed2b01acfa60d083f8ef033df28242f43578f74172847cac10da27852732d4d61211d0d5ee24869d146db911407deac26c8c900d8bca1263504aec4447f5c22c08bfbf2ce7ed6897968c73f5a181aab59d3dbee51dfdccf051606bb9434d936c45bd665466f1acca1ec0753d2e9f6b25fe80b7004d3bb567f25816092757fe487df0b7423b9e50387df1ff04c45da8e290f315c07ba807de4dc4a84719f12d6e1b00cafa04cf85b57c11075c5cdb4684b0c837c52acf9e3c95bda7e0d8ae71ecbf0673b405487a9f32b9471cef53ea15aba1fe7a2ccd7098fd543f32f85bf3866b88ee5480a083614174c36c78ef8045f9cd3809612c30d23aef7f1f06c3ce84939689e8e2a6a8d9f0918dc77a7e79f90697be8c166e93f950cf624f4ce512356ad9ffc52037daff69c2e6172a80c8b917bff243850b9d0abbcef159472eddee4a2d2fee3c650c12924b3c81d6bad25c3abaf53be863e7f0bfce3e99461ac4b7821f2e7021cf7bb35f8e265a7c8bd7d34e84cf6f8135b9f473665b206587800a4e895c9ca2d1a9d5d16a07eb3e3b99b6ddd5b70bd263a91a301f233b9cbb6602611140fad405f3f698d9cbc439e86670a0aaa886513f95921ab1ce9acf83cc60d167fd7334d583c0b7209b7404941be325c59159c9bbfe1c9b79f59b49c416334def5fa362df72af9394f65152bce7b95e75b3fa8ee7fe12ce4d0856d441241cf134bda26e3d0af84bb796ea3babed6f42342d289853bc1f8381d4e97aec2a5acd9a4da087e7487604432380c009ce869eec269a26caf8c5f777d8cbf11fc956f2071720e39d68a1f3987258489b1c4a58c02da30ba1fcb17e147ef844ecb0bf874c67ff9cb8f7d0efc30c212b891f0a208950a0f4ae6b8c9d87034d8d4161f9f52f5abd9417c2ce622c77ab9e4059fc86de96d866c5450a10cdbe5fe10057a2768cf29ee93b0b4f96b404c4cd476103401ff66ee8a1064556f4930f01cd44bc3e070f0f87fe09a4629feeed3a3ab9bae198783aaeea3d8618cd29b2cc02ec89d3dd17dce819f46c1e9a8eb9f8e2b6b72653afdb4b7aadc0644bdc0042702af2ca197fb8ca14ad7a23d5a955322ad5e4e538f9e861fc7990a5e3987f88ad88ac75c5e8326102f2fed8caaec44d64f1d60ccc147a6df88045da43761becc3802a1f7d30b73aba3c4a3abad441bb7155c3243a10884d147fa39162b7892c071fbfe0e2b90059a48bfd530bebe976bed5b74735c87e5e30a248a0520259163dce79e4104e80d8dfadd55f83ae3dde560a89a9e772efc921128e9d5385ceca7c2e9419b6ccc34d62e7d7455d4f950ab36c926d7bc8db02c13bbb0dc55d5adf81fef3126e90282e545465d38d5f1f9ae99093310d66803531f27d1abdb04474ba3508344e252b1c58b01ee020b867fe65b9ba5f8ad8fa409124347b31c61b656ee527c8775e73e13f7136aa200015e8a8f0cbad629fc0f85fb6c82bf26078e8fe9ba74cd2bc2ebdf5bd20b14167ad039490ae72071fa1fe5f2f8e68ce65f88853983fb56c7f7749e0a813dac094d8d8d47ceeafc377cfaf28dd0a873311b892df9e56f7d1dc7eb5480cbb5b284ce325097661e41e0b416405c40f8f37f556c59119a35194d6406596b6a69bd3d2c252d4c46d561aba755bd195954d284f9f4da7ad0c80c108567d31d306271fbbce59e6c687643759c8754a2465fbb4558471cb62e3dec56b55840aa22b8e19f678e3ee9c2f7c730f84c699e0e1fce6daec510cd385b29bbb0a9807f054a992694e84dea6cbe6cb269be05152d0dcae709968460830375229c2354bd0bae88ff68362d6623537ced63714e784c83b4d3f11d32d652ed2ac7217cef20429580aef9aa3a2a98d4fb51d6b18fb7bd5fdeaf423aff01e648b89d3f7cbf2bb3e18e7885eeb4f0ace936537baf1f7a11c5fa6c0e748f3d736f81f8c41e44c92f0e0209843e378c4839ff1ca4e7b3ed8b2aef397d590bda5ec27dc506c5467049cda2dfc32cbc767267f660f4448f5dc80ea11efcf85e30ed3da96c1e52f981bd0502179fb10a36ac136a149557afcd56478de98d7d579a6a76a1d47b37cf1378761d79dcc435772ba299743b9963653427d80630ca6b268703fcb03d864647f3065ab14a9326b868d7d357b842bba969db83f5133cab372c072b39e73fed838a83e2c438b5cc4d875abf02d3c936106ee7035dac61551d98493d7f7049b795d68559a5cda0b73b0962c493ca759b17f1ee7085f5454e8baedcb74d029b3c90a6c06b642f29969aa7dff54742488e027366fef02edbdd066d335e1d928fa633e4b4c6fcca99049cf74a997e074919b04cef340a981427f2001664c107834386f99f40690ab6a216c27e3378e4ebb83e57d6b4026748663f72c82eeed4924f109a7518eeac89402c1aea74256611e0c92930361da0cdabf0a62a313200e9d87b8209cc5b1cde14bdb8ac5656ebbc93100b6bf673e636d5cfad45effe7b9404cdcef265052b5e17b1fbe8aea305fb9fa09bc58b54a6240ef78174e859bf8b5fec0bdad640dbb2a813ad707dc7c13be233e245c83a0b546cfa8b74b1755b137359c84f876aecea4a1815607936cbd9e7c5b4a4f2076bde6df097321e743d4bf4a0618a14056d4230bb491a8e200c08b16a9e71a775fab38a1a9e1c02916a96069ab0fb6667265c42005aea20c28fe108f3b69888b71afc6f56892211bbfaf76a5c45cc9d2eb5d23ebfc6fc673a73973b01e6d84f83a409b8895e7a1c73f4a3176b20e54e39f01b391229a81caa9df40c61d695e126633cc6b39c9ce23844aadb10d72c3abb5cd859f429a546d519b3d763a5714249b427b9727f36715d1c312cdddead4aba9fa2ad4837a3a5e4430af2cddc6f1161fd898f04efa555cdf6fe7c5ca59edd2b06b15bba0aec897db16f58b53498c364bd324c138a4f45f8ff904e5aaaffbfa4ff40cc979c25e8ec0fbf79a880a055b7355711d11b1110b7bc1220dbcc0f563d9b9197d6c86b8ad6b6f9f45e7ce580274119795cc37554755ffa8b3ced8035e02ac70111755e1fd55aa1a67482b35912c87c7adb499769900c4676df78103d5557d13879b94eb5dc30950e5b4ab5519373045eed9c7d4a6ad6af27e1c1513c7ead3ba4606853c25ebb83a58ad21fd67d15cd21a64587c6ae3a4327f1159c91abc067d8bdfe351aea825e5b27ff0c36d2cf83ca5a0a8d674e585d39d003e6db4d00573d7bf1b3ae5549d47083b392b0b20305e21f1066917a76931b8c42f55ebdeb3db5aaef63cbbcded6c8a68ddbbc7ef9b1a101e53b1e896689eadabe01f4df42d1f005bfe0a530b492a159c5a072a6dbd41079dc8c246481148d489ae6a580164c090cbacab516b25bb3bca15863fc62a988194bb0c44a6116e6003852255cdaea2c27cc403c15b0422d6d81b5ba403596c28d8526d37be9cefa6ec3091e45fd13948f3bc2cd356af30c2b836b17a934c5c2cfacd7c2f327253670e65ebabfd5a3bfa8072b9d5772871ac55269c637323756427d6be52df5c11d56863886fdda58cd7b90654a568f4336dd8a9d54aba82fbd62e00ff114e1edbaa0f49c3beca50e43905771c8dae5935e1fa8536a8057b9e09bf60e26a2f96040916902cca0ce3c170bc82d112f6e83f4f122231bc2f9b1f15246d29c0f67bae6a0d2c797185653a5caa72c11373d3eed8f4b014ba907fc44703b313dc162e1707f07105a1249881c471d8270676e73e169b8ab48a30aa551f8b21098ac142eb8585b7e8369adbe649305d52e75b9bacc1a99fcb7e28f26fdb77612393ca6ff9cd76d415ab981012e5eb26e13e33b62767b0f18c1539d0ee5b0a14c7989488bcfd93ad9a8b33acb9c8a3a36ae79ec1c84b2556786fcd94f00821d5ca0fd51fec307468849f1ff3448cba09d4140cf9b35a00adf4b4f7a54331613faf6569d0622afedc8f3ab7de1a976b095eb22aaf0490456462faef003fbdf0ea2dc9e8a0d751f71e5d117bbfb1949efb86de1269feb12b0407fe26df0e35d938fdc4b739575098eb3cfdc29d26ff08860bc1f6dc2e1e6ac099a669b20adaf580e7b6a95770ef176274f4b0044773523e9868696d3652312b7c35d172ca82dadaffce7fa8900245e166833e1bf4f415c7dcc7783dcd4463417fc7c1b4ebf49cf245e95ffa3948a1b8ddcf9b37f2bbd971b43eece47586278dfe8358e917b0bebd6d294f7c8aa1161b498d7a0a61b9f7b57622be5fb4770319ed60b5cc3e5e73bff81108fd21cbc057ac360e60576cdc35a71513f7e6c45bd00c87e88c1c1cef274192a0fc90af8a9282548620ee36fd9e02f604aaa32a61a0571277140b0554e72881248e0602f6310050552afab030aabf94f26a4d3c888371d044e113e97b4d5e662a344f5724b373d593a3b6c74c2dee56c8faa73ffa7e35f780ce73450ff79759e0c2762d683e7f53f75dfb1052120e860fef396b744e0a7a605e1e06d44498c80e7d664ce26de57919a2f37705bbede6a6aef7b22487ad862e5d3119613f98c33316a7da70ecb3052cfc0196775e15c9cd3ed33e08c6737e3f5f7ef66eed5dda5cf3fc76073d3f232beabd8988d5c3e4108d83262bca958a27df29ecdb0130376599e53a3eeb50783c9c057eabc69753aca5becb5b9bc5d5287e4bdeddffc961751dc56d98718ba4980b720733c0558548d854519116a7cc25748bf85bb526977eb19836c7fc3b8acf30dcaeb8bfdeb752fcc92b697e90dde555232c95faba94a4de9ac1950d2291c3897dddf34f516b5fed9e400519687b7ae6e527f6eb9348272b15961c79a8fdd59b55ee4e5ea9c1f8e552cb81cb296e64370bfbfa7febf726e7313079d16f762a11f2ad026b12bb220d3e9150ea5c0c5817d8ccbff370a5100dff80ad61857023455c399f6cf18faf6135029b0a832cc737d707275f04bf113e1dea907dbb238286d2d1350755b73793463da173630095e66d986478a4339cb08fd917925dd3962cd33fb4a7c8b87532ee488baea3122d28909270e1bfe75de5ee6084395b610d2b2a1540822ea655fa93fceb9704e49dbfcc20b4a0f9a4f1c3897a7ceaa421d6973e83adc1e7e4e733389b50a56ce146fd8f505ea0d0d7b474b8998315a4af3e4cc20f623d0fde9c9b92f691a1951b1def965cf544d20257f08d28e2877dfe9c691de2b5f9e1a7f2ca458746639c1001e0a0aad576efde4ffef858fc922b8e996ef74c96ba04de517413b9b3fbb1a4674e0b6dfa60c13cff61645344c4cfffb00edf14fa9e4a399fb73df9fed", 0x1000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='.dead\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r4}) stat(&(0x7f00000034c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$UHID_CREATE2(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000"], 0x138) write$UHID_DESTROY(r6, &(0x7f0000000340), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x2a080) ioctl$EVIOCSABS2F(r7, 0x401845ef, &(0x7f0000000080)={0x7, 0x7, 0x5, 0xd5, 0x8, 0x9}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, 0x0, 0x0) 1m27.579345699s ago: executing program 4 (id=1480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x0, 0xd, 0x2, 0xd, 0x6, 0xa, 0x2, 0xc, 0xf, 0x3, 0xc, 0xf, 0x10, 0xb, 0x2, 0x1], 0x1, [0x2, 0xe13, 0x3, 0xffff, 0x0, 0x4, 0x1, 0xb7a, 0xf, 0x8, 0x1, 0x3, 0x5, 0x9f8d, 0x2, 0x3], [0x4, 0xc, 0x1, 0x10, 0xc7, 0x60, 0xfff7, 0x7f, 0x0, 0x7, 0x1, 0x0, 0xc, 0x4, 0x4, 0xdf8f]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@o_path={&(0x7f0000000340)='./file0\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x7fffffff, 0x75, &(0x7f0000000840)=""/117, 0x40f00, 0x7d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x7, 0x4, 0x942a}, 0x10, 0x2069, r0, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3], 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44010000080a010200000000000000000a000007080009400000000003010740ebbd88720dd6616f52a391d9d8bb2e93ca6985b2603bfe10125f03000000b92b70a8102c493d1932a2aadd51488b4db4d6ff8f0c036dd7c12ad1300e4dfce9a6888e6d0daabc47945376ca98fcfc2f89d137a26b439a3358d859f18509582938b867cc9ca71f19dd13cb4a92f2a7ccd81582502e6af2ba7fb351c3ad9a4df5dffb9e00af37f5f3e1a0e95887c0f725801fd8586bedd11fb1a31a7d755a244f47f3225ce43e59525a9a93c4d183225d5344d01fa2813bec1717452cbf8fc114f2ed4077be278990256cb280db7daf021fe64d0f70d6aca417aa4896a4eb53713f049cea100f9cdb7cd7ce3157ad585a457198be1ad1fd3bdbc7ec17bda51ff5000400058008000940000000030900010073797a31000000000c0003400000000000000005140000001100010000000000000000000100000a"], 0x16c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x8, 0x8, 0xd, 0x1, 0x5, 0x1}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x18014041}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e9bf782db44b904021d08000900030001000000000000000600140903600e120900210000000401a8001600a40001", 0x43}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1m27.53036008s ago: executing program 3 (id=1483): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000080) socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0xc00c, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) timer_delete(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000"], 0x0, 0x52}, 0x28) syz_open_dev$evdev(0x0, 0x4, 0x181000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 1m26.462912257s ago: executing program 3 (id=1487): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fe08000007"], 0x50) timer_create(0xffffffea, 0x0, &(0x7f0000bbdffc)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000001000000180000001800000007000000050000000100000f110000000b00ffff02001400110000000000002e006100"], 0x0, 0x37, 0x0, 0x9, 0x1000}, 0x28) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300", 0xaf}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x4000}], 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x403}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) stat(0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) socket$unix(0x1, 0x5, 0x0) getdents(r3, 0x0, 0x0) 1m24.543353436s ago: executing program 3 (id=1491): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 1m24.29233387s ago: executing program 3 (id=1492): socket(0x1e, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000004000000040000000200010000180000", @ANYRES32, @ANYBLOB="0000000000000000000000000000e2366addc65bfa4554cb6a2fbd61062649418dfdda4c44b539ac4664a7c44c75ff2aac9553768238c3f1abf7ce09182583f9ef5b8d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 1m12.112557468s ago: executing program 36 (id=1480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x0, 0xd, 0x2, 0xd, 0x6, 0xa, 0x2, 0xc, 0xf, 0x3, 0xc, 0xf, 0x10, 0xb, 0x2, 0x1], 0x1, [0x2, 0xe13, 0x3, 0xffff, 0x0, 0x4, 0x1, 0xb7a, 0xf, 0x8, 0x1, 0x3, 0x5, 0x9f8d, 0x2, 0x3], [0x4, 0xc, 0x1, 0x10, 0xc7, 0x60, 0xfff7, 0x7f, 0x0, 0x7, 0x1, 0x0, 0xc, 0x4, 0x4, 0xdf8f]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@o_path={&(0x7f0000000340)='./file0\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x7fffffff, 0x75, &(0x7f0000000840)=""/117, 0x40f00, 0x7d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x7, 0x4, 0x942a}, 0x10, 0x2069, r0, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3], 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x8, 0x8, 0xd, 0x1, 0x5, 0x1}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x18014041}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e9bf782db44b904021d08000900030001000000000000000600140903600e120900210000000401a8001600a40001", 0x43}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1m9.216461192s ago: executing program 37 (id=1492): socket(0x1e, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000004000000040000000200010000180000", @ANYRES32, @ANYBLOB="0000000000000000000000000000e2366addc65bfa4554cb6a2fbd61062649418dfdda4c44b539ac4664a7c44c75ff2aac9553768238c3f1abf7ce09182583f9ef5b8d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 20.069535371s ago: executing program 1 (id=1661): r0 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x7, 0xa9, 0x5, 0x2, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 16.076222573s ago: executing program 1 (id=1666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) sendfile(r5, r5, 0x0, 0xe3aa6ea) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x22020400) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) fcntl$dupfd(r7, 0x0, r7) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 12.546249227s ago: executing program 8 (id=1670): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) (fail_nth: 4) 11.965521646s ago: executing program 1 (id=1671): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008"], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x48041) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) 10.900063732s ago: executing program 1 (id=1674): socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x5, 0x8, 0x5, 0x0, 0x0, 0x4030, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7}, 0x410, 0x2, 0x200, 0x4, 0x3, 0x4, 0x2, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x9) ioctl$TCSETSW2(0xffffffffffffffff, 0x5432, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x646, &(0x7f0000000700)="$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") setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3e8, 0xe8, 0xe8, 0xe8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x5, 0x1, 0x1, 0x0, "247ac4067fed6b7983c0735464dc42c6bc6ea6c4c742b38fb6ba9123c34eb70fa0fd51d019706e73cf1a27baeb6f54c674c9ddca79751b9619874193362e2e04"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 10.345345531s ago: executing program 2 (id=1675): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x5}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8011, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) futex(0x0, 0x271aa6121c3ce27c, 0x4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) stat(0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xfff1}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x7, 0x10009, 0xffffffffffffffff, 0x1}, 0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f0000000040), 0x83, 0x2, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)=0x1, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="c9f7b986f2ca3a0800e370723eae", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012abd7000fcdbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e300000000a0001007770616e3100000008000200", @ANYRES32=0x0, @ANYBLOB="09b895811372fe4c02d397c21b7a71945f6001c5e0637a5328c66c71821f948a6c65d9a3317981c64536487c8674d426a0"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8d1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xfc, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0x14430, 0x0, 0x4, 0x0, 0x100, 0x80002, 0xffff, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 10.290886562s ago: executing program 8 (id=1677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) sendfile(r5, r5, 0x0, 0xe3aa6ea) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x22020400) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 10.127956374s ago: executing program 7 (id=1678): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 6.162916845s ago: executing program 8 (id=1679): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @empty, @multicast1}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000001240)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x22, 0x0, 0x0, 0x0, "3cd3dd92ef26467ef0ca7ad9ee3e70043fa72360e4360307b45f38cacca0c95865afb7c5a410f0e3a11a2826e0b07f0d65b9797b8f04eb02020dfb2d22ae03f9"}, 0x48}}, 0x0) 6.083582107s ago: executing program 2 (id=1680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) sendfile(r4, r4, 0x0, 0xe3aa6ea) 5.831335681s ago: executing program 9 (id=1681): syz_emit_ethernet(0x50, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 4.823007756s ago: executing program 8 (id=1682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x26e8, @empty, 0x400000}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="a7", 0x1, 0x2400c040, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r1, &(0x7f0000001300), 0x0) 4.822468946s ago: executing program 9 (id=1683): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x80, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000019080)=@assoc_value={0x0, 0x7f}, &(0x7f00000190c0)=0x8) set_mempolicy(0x1, 0x0, 0xa7) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x64010100, @remote}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x5, 0x89ff36bcc340e58}, {0x5, 0x2c07, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0xfe7, 0x1000}], 0x4, &(0x7f0000000180)={r2, r3+10000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xf7, 0x9, 0x2, 0x1, 0x7, 0x9, 0x3}}, {0xa, 0x2, [0x100, 0xd61, 0x66]}}, {{0x1c, 0x1, {0xf3, 0x4, 0x80, 0xffffffff, 0x1, 0xd170, 0x5, 0x1}}, {0x6, 0x2, [0xfff8]}}, {{0x1c, 0x1, {0x7, 0xf, 0xfffb, 0x27abce4, 0x1, 0x3, 0xcc3d, 0x5}}, {0xe, 0x2, [0x1, 0x5, 0x5, 0x0, 0x2ca2]}}, {{0x1c, 0x1, {0xff, 0x40, 0x80, 0xa41d, 0x0, 0x8, 0x6, 0x2}}, {0x8, 0x2, [0x0, 0x524]}}, {{0x1c, 0x1, {0x6, 0x69, 0x8001, 0x8, 0x2, 0x5b, 0x1000002, 0x3}}, {0xa, 0x2, [0x5, 0xfff8, 0x6fd8]}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 4.805743106s ago: executing program 7 (id=1684): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008"], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x48041) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) 4.62457798s ago: executing program 7 (id=1685): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 4.478417862s ago: executing program 7 (id=1686): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x11ece8, 0x7, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x0, 0x2}]}) (fail_nth: 1) 4.065010848s ago: executing program 9 (id=1687): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x1}, 0x11ece8, 0x7, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x0, 0x2}]}) 3.92443061s ago: executing program 1 (id=1688): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000002000)) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f0000000580)={0x4034000, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x1c}, &(0x7f0000000340)=""/31, 0xffffffffffffffcb, &(0x7f0000000440)=""/73, &(0x7f0000000500)}, 0x58) setpgid(r1, r2) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd(0x5) r4 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0xd8, 0x9, 0x80, 0x8, 0x0, 0x6, 0x40148, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa404, 0x7fffffffffffffff, 0x5, 0x0, 0x2, 0x8, 0x6, 0x0, 0x1, 0x0, 0xea1}, r3, 0xf, 0xffffffffffffffff, 0xa) r5 = socket$inet6(0xa, 0x80000, 0x3ff) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) utimensat(r7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x100) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0xfffc, 0xfffffffc, @mcast1}], 0x1c) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0x1c00, 0x4}, 0x71b3, 0x0, 0xfffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff027}]}, 0x10) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x804718, &(0x7f00000002c0), 0x0, 0x48d, &(0x7f0000000a00)="$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") bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) 3.867160271s ago: executing program 7 (id=1689): socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x5, 0x8, 0x5, 0x0, 0x0, 0x4030, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7}, 0x410, 0x2, 0x200, 0x4, 0x3, 0x4, 0x2, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x9) ioctl$TCSETSW2(0xffffffffffffffff, 0x5432, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x646, &(0x7f0000000700)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJffjUjX11YRcFC3Yh4qKhSWro9AdJCrYWTMCFgoKI2yLd+A+4l+7diaDuXAtVpGJBS+dx79xpJpP5lR8zk+R+PjCZc889k3O+uXNyz713ztwASms++5FGvBvx+kYSMdu0bibqK+eLci/+/fhm9kiiVvvuv5JIirxG+aR4PlcsTEbEny5HfLqyv97Nh49uL1drdT+JuLB15/6FzYePPli/s3xr9dbq3aWLX/vwo8WvL3241NTQwztXPF+5+p3P//KnP/zq2p+rHyRxKa6P/3glWuI4LvMxH6+LEJvzxyLioyzR5u9y2pyBEEqtUrwfxyPiszEblXypbjbWfzHSxgEDVatE1LpLehUATivdG8qqMQ5oHNv3dxx8fcCjkuF5/nH9AGh//GPFKYfJ/Nho+kXSdGRUP7dx/hjqz+p49XjyyavHc09iz3mIl2+2ztgx1NPJ9k5EfK5d/EnetvN5pFn86Z5j/TQiFiNiomjft47QhqQpPYjzMN0cJP7m7ZDFf6l4zvIvH7L+1tNaw44fgHJ69nGxI9/Olnb3f9nYozH+iTbjn5mjX5LJjXr/13n819jfT+bjnrRlHJaNWa61/5XjrRl///mVX3eqvz7+m3vSeGT1N8aCw/B8J2KuJf6fZcEW458s/qTN9s+K3LjUXx3f/ss/r3RaN+r4a08j3mt7/LM7Ks1SXa5PXlhbr64u1n+2reMPf/zB7zrV3z7+twYQaXvZ9p/uEH/T9k9bX5f9Te63/5U7rRm/v/b0Tqf6Z3pu//QfE0n9eHOiyPnRztbWxlLERHK1KFLkL29tbVzsHm+9zMta/rxUj//9L7Xv/3ve/y1RTTX+Zfbh/vduv+i07jDv/6aLya9rfbahkyz+ld7bf1//z/J+1Wcd//3+gy90Wtct/qmjBAYAAAAAAAAllObXYJN04U06TRcW6vNlPxPTafXe5taX1+49uLsS8X7+ecjxNNIk/8jIbH05WVuvri4Vn4dtLF9sWf5KRLwTEb+pTOXLCzfvVVdGHTwAAAAAAAAAAAAAAAAAAACcEOeK+f+N+1T/p1Kf/w+URO8bzO27/wNwRgzyBpPAyZb3/267+LeH1xZguOz/obz0fygv/R/KS/+H8jp0/5853nYAw2f/D+Wl/0N56f8AAAAAcCa988Vnf0siYvsbU/kjM1GsM+kXzrbxA5WuDKwdwPDp0VBeby79G+xD6fQ1/v9f8eWAg28OMAJJu8x8cFDr3vmftX3lrp2jtw0AAAAAAAAAAAAAqHvv3c7z/w82Nxg4bUz7g/I6wvx/Xx0Ap5yv/ofycowP9JjFH5OdVvSa/w8AAAAAAAAAAAAAHJuZ/JGkC8Vc4JlI04WFiE9FxPkYT9bWq6uLEfF2RPy1Mv5Wtrw06kYDAAAAAAAAAAAAAAAAAADAGbP58NHt5Wp1daM58f99OWc70bgLau/CtT7KdE18Mw74qkiG/2eZioiRb5SBJcaacpKI7WzLn4iGbWzGyWhGnhjxPyYAAAAAAAAAAAAAAAAAACihprnH7c39dsgtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDh273/f4/EynT9BX0V3psYdYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn0SQAAAP//Gq88Qw==") socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 3.866549551s ago: executing program 9 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) sendfile(r5, r5, 0x0, 0xe3aa6ea) socket(0x10, 0x3, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) 3.715030873s ago: executing program 2 (id=1691): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x80, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000019080)=@assoc_value={0x0, 0x7f}, &(0x7f00000190c0)=0x8) set_mempolicy(0x1, 0x0, 0xa7) syz_clone(0xe50c0700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x5, 0x89ff36bcc340e58}, {0x5, 0x2c07, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0xfe7, 0x1000}], 0x4, &(0x7f0000000180)={r1, r2+10000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xf7, 0x9, 0x2, 0x1, 0x7, 0x9, 0x3}}, {0xa, 0x2, [0x100, 0xd61, 0x66]}}, {{0x1c, 0x1, {0xf3, 0x4, 0x80, 0xffffffff, 0x1, 0xd170, 0x5, 0x1}}, {0x6, 0x2, [0xfff8]}}, {{0x1c, 0x1, {0x7, 0xf, 0xfffb, 0x27abce4, 0x1, 0x3, 0xcc3d, 0x5}}, {0xe, 0x2, [0x1, 0x5, 0x5, 0x0, 0x2ca2]}}, {{0x1c, 0x1, {0xff, 0x40, 0x80, 0xa41d, 0x0, 0x8, 0x6, 0x2}}, {0x8, 0x2, [0x0, 0x524]}}, {{0x1c, 0x1, {0x6, 0x69, 0x8001, 0x8, 0x2, 0x5b, 0x1000002, 0x3}}, {0xa, 0x2, [0x5, 0xfff8, 0x6fd8]}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 1.96075545s ago: executing program 1 (id=1692): socket(0x1e, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000004000000040000000200010000180000", @ANYRES32, @ANYBLOB="0000000000000000000000000000e2366addc65bfa4554cb6a2fbd61062649418dfdda4c44b539ac4664a7c44c75ff2aac9553768238c3f1abf7ce09182583f9ef5b8d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RXATTRCREATE(r2, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.511004707s ago: executing program 2 (id=1693): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @empty, @multicast1}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000001240)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x22, 0x0, 0x0, 0x0, "3cd3dd92ef26467ef0ca7ad9ee3e70043fa72360e4360307b45f38cacca0c95865afb7c5a410f0e3a11a2826e0b07f0d65b9797b8f04eb02020dfb2d22ae03f9"}, 0x48}}, 0x0) 1.498931208s ago: executing program 8 (id=1694): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000", @ANYRESOCT], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) syz_emit_ethernet(0x50, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 1.377048849s ago: executing program 2 (id=1695): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008"], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x48041) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) 948.801736ms ago: executing program 8 (id=1696): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) getpid() rename(0x0, &(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6c, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000000b03190000000000000000020000000340000000000600010027000000000000000000000000000bdb774d506ab7bc37be555e7034f70765bcf88bc43772439f6422eb3ef98468a3a669835d88eaca0c6418f6b1e1053819ae410610b39baa9e94e55f57488c0b3056880fd45758c99c278d2416d78641f9e1982acb4b869cea47d924f7479a258915fb3f9690a2"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x68810) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="28006ed7010000009f5a35b16a00000000eaffff", @ANYRES32=0x0, @ANYBLOB="63800000c31006000500210001000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x400c040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040)=0x5, 0x4) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0400980}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x2, 0x70bd2d, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x440c2) r6 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000002140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}]}, 0x0, 0x479, &(0x7f00000004c0)="$eJzs201vG0UfAPD/2knTtzzJ06cP0BfAUBARL0mTFugBCYFA6gUJCQ7lGNK0Kk0b1ASJVhENCJUj6icAjkh8Ak5wQcAJxBXuCKlCubRwQIvW3k2dxE4Tx67T5PeTtp3xzHrmv7uTnd1JAti2Ktk/ScTeiPg1IgZq2aUVKrX/bi3MTfy1MDeRRJq+8WdSrXdzYW6iqFrstyfPDJUiSh8ncahBuzOXr5wfn5qavJTnR2YvvDsyc/nKM+cujJ+dPDt5cezEiePHRp9/buzZtsTZn/X14AfThw+cfOv6axOnrr/9w1dZf/fm5TcX5nYs3WNww21WorL0WNZ5fMPfvrn016WTniLRLHo2i3JEZKertzr+B6IcPYtlA/HqR13tHNBRaZqmfbVk+fani8n5FNjCkuh2D4DuKG702XN8sd3lKUhX3Xip9gCUxX0r32olPVHKnuEHa89G/R1qvxIRp+b//izbYtn7FACATvgmm/883Wj+V4r76ur9J18bGoyI/0bEvoj4X0Tsj4j/R1Tr3h8RD6yz/cqy/Mr5z8+7WgpsjbL53wv52tbS+V+pqDJYznP91fh7kzPnpiaP5sdkKHr7svzoKm18+8ovnzYrq5//ZVvWfjEXzPvxR0/f0n1Oj8/2bCTmejc+jDjY0yj+ZHElIImIAxFxsIXvz47ZuSe/PNys/M7xr6INRyH9IuKJ2vmfj2XxF5LV1ydHdsbU5NGR4qpY6cefrr3erP0Nxd8G2fnf3fD6X4x/MKlfr51ZfxvXfvuk6TNNi9f/+I7kzWq6WLR9f3x29tJoxI5kfuXnY7f3LfJF/Sz+oSONx/++iH8+z/c7FBHZRfxgRDwUEQ/nfX8kIh6NiCOrxP/9y4+903r8nZXFf3pd53/9ifL5775u1n4lXy9e/fwfr6aG8k+y83+nuGqN78xzzTvY6nEDAACAe0mp+jvwSWl4MX3b/thdmpqemX3qzPR7F0/Xygajt1S86Rqoex86mr8bLvJjy/LHqu+N0zRNd1XzwxPTU51aUwfWZs+K8V8qDQ/Xyn4vL637Yld6CHTUutbR/E0XbClt+20C4J6zhvHvrg9bVMv3//n29gO4+8z/YftqNP6vRtzqQleAu8z9H7Yv4x+2L+Mfti/jH7aljfxd/2qJfSc79c1bLVHeHN1YdyJKm6IbrSVKm6MbtURfRKy18tVoc+tpml5tWNTtn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8W8AAAD//2gm5Ig=") openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@local, @empty}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0xffffffffffffffa8, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000019080)=0x2) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 750.441259ms ago: executing program 9 (id=1697): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @empty, @multicast1}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000001240)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x22, 0x0, 0x0, 0x0, "3cd3dd92ef26467ef0ca7ad9ee3e70043fa72360e4360307b45f38cacca0c95865afb7c5a410f0e3a11a2826e0b07f0d65b9797b8f04eb02020dfb2d22ae03f9"}, 0x48}}, 0x0) 722.74442ms ago: executing program 2 (id=1698): socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x5, 0x8, 0x5, 0x0, 0x0, 0x4030, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7}, 0x410, 0x2, 0x200, 0x4, 0x3, 0x4, 0x2, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x9) ioctl$TCSETSW2(0xffffffffffffffff, 0x5432, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x646, &(0x7f0000000700)="$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") setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3e8, 0xe8, 0xe8, 0xe8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x5, 0x1, 0x1, 0x0, "247ac4067fed6b7983c0735464dc42c6bc6ea6c4c742b38fb6ba9123c34eb70fa0fd51d019706e73cf1a27baeb6f54c674c9ddca79751b9619874193362e2e04"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 375.072035ms ago: executing program 9 (id=1699): r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8, 0x0, 0x0, 0x7, 0x0, 0x3580000000000000, 0xa001a, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9e, 0x4, @perf_config_ext={0x1, 0x647}, 0x2401, 0x10001, 0xf0f, 0x0, 0x6f0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6a180, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x3, 0x0, 0x3, 0x6, 0x8001, 0x4}, 0x0, 0xff6fbfffffffffff, r0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsmount(0xffffffffffffffff, 0x1, 0x72) r2 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000180)=0x8, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/uts\x00') recvmmsg(r3, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) io_uring_enter(r2, 0x0, 0x0, 0x4b, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001300)=0xc) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x7fffffffffffffff, 0x0, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffec, 0x0, @perf_bp={&(0x7f0000000140), 0x9ffe842cdabd21a7}, 0x800, 0x4, 0x8001, 0x4, 0xfffffffffffffff8, 0x3, 0x7, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x20, 0x2000, 0x8000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='user.incfs.size\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000013c0)={[{@test_dummy_encryption}, {@errors_remount}, {@dioread_nolock}, {@barrier}, {@usrquota}]}, 0x0, 0x5ad, &(0x7f0000000180)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000300)={0x0, r7, "27c4ec5cfe9341be8fa805ef4bae835720011415e0a911faeb7c1ed05cf3a534dcbaaff0fb9ca4fd34652459668fbc401fc08d2e358abadbdba4944adc9f5ba55a899fb3a55b698d1de6e33524e92e34b235121f2b1dbfc6f7c12381f86a4320f7f83a7968b95d0694139553ec10ee83e5a6c2dd638b56943102cca3fe23d951a91404ff21b164e6a7a3046d0ff06b177a75cb3812267e928be5ea89cda27c7af68a8e33ec770e0aea7f7c9693f063a20b1d85cdc1d27506ee677571b2c3c97311c74cc54516b55b628982219d858248ea63103df87be4085d3c5df7eda8648d5f28a5be2e8c439afae09dc1ab4e7b88a8df6327fb16f519dc8f24714d0c6291", "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"}) 0s ago: executing program 7 (id=1700): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20110, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x1074cc, 0x1221, 0xfffffffc, 0x0, 0x48, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f00000006c0)={[{@nodots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1b7d}}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@fat=@debug}, {@nodots}]}, 0x0, 0x249, &(0x7f0000000c40)="$eJzs3LFuI0UYAOAJduJLTndyhQTVCBpoLLiaBqFDOmEJxOETUCDtKQ5YNnbkdWHTkJqKB6CipICGCiTeIDwE0EVIURpoYJCzcWITbMVgEyn3fY3/nf+f2VnvamSNpT165fOP23t5bS8bPLpV2Qhjv/2RUjU8FSYOwovfvHvy2cOtMCPGeDdVivj2o2/vfl8Jh9UPjo7v/XL49OEzR3++81Erj608dnuDmMXHvd4ge9xpxt1W3q7F+FanmeXN2Ormzf5Mfq/T298fxay7e2dnv9/M85h1R7HdHMVBLw76o5h9mLW6sVarxTs7gf+i8dXvKYXjlFKqHISU0qJiX/YNtMT95wZ6+N77b7xar99/O8ZbIfx6MGwMG8VnkX/9Qf3+S/FU9aLXyXDYKJ3nXy7ycWrY4bCxebpgjPP3LuXH/bfCC88X+XHutTfrf8tvh921Xz0AAAAAANxMtXju8v7+xtnhbP7nndP9/eJg6v+BYv/+yx/O+pfDs+X/+WIAAACAf5SPPmlnnU6zPx389CCEqZZSCOGiZjvMFl8p+OLsdFfvVQ6zLZMJL3HS6w82QrGJssKRUyWENU8+/65dmnO/tiYt24uen9UHm0s/P0sFt89bQnVOzY+bMy2leQOG8r+bxterfEhWESxYNJ5bz1oEAACs18WP/uueCQAAAAAAAAAAAAAAAAAAADy5rvA+sMmr3ubXpJQ+HVfMGed6rxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLG/AgAA///72kz+") r2 = socket$pppl2tp(0x18, 0x1, 0x1) statx(r1, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r5, r5) r6 = getuid() r7 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r8) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000840)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000980)=0xe8) fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {}, [{0x2, 0x4, r3}, {0x2, 0x1, r4}, {0x2, 0x3, r5}, {0x2, 0x6, r6}, {0x2, 0x4, r8}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1, r9}, {0x2, 0x4, r10}, {0x2, 0x4, r11}], {0x4, 0x6}, [{0x8, 0x4}], {0x10, 0x4}, {0x20, 0x1}}, 0x74, 0x3) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r14 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r14, 0x200005, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r13, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xff}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xe6f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4015}, 0x20040001) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001100)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x24}}, 0x20000000) kernel console output (not intermixed with test programs): =root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 309.844199][ T9693] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1462: Invalid block bitmap block 0 in block_group 0 [ 309.945268][ T9693] loop4: lost filesystem error report for type 5 error -117 [ 309.946821][ T9693] Quota error (device loop4): write_blk: dquota write failed [ 309.955051][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 309.955261][ C0] EXT4-fs (loop4): initial error at time 1782392892: ext4_read_block_bitmap_nowait:483 [ 309.955597][ C0] EXT4-fs (loop4): last error at time 1782392892: ext4_read_block_bitmap_nowait:483 [ 310.017961][ T9693] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 310.066270][ T28] audit: type=1400 audit(1782392892.833:1048): avc: denied { write } for pid=9689 comm="syz.3.1461" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.097499][ T9693] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.1462: Failed to acquire dquot type 0 [ 310.102622][ T9699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1461'. [ 310.139030][ T9693] loop4: lost filesystem error report for type 5 error -117 [ 310.152190][ T9693] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.1462: Freeing blocks not in datazone - block = 0, count = 4096 [ 310.197393][ T9693] loop4: lost filesystem error report for type 5 error -117 [ 310.201047][ T9693] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.1462: Invalid inode bitmap blk 0 in block_group 0 [ 310.223268][ T2459] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 310.239660][ T2459] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0 [ 310.248341][ T9693] loop4: lost filesystem error report for type 5 error -117 [ 310.253413][ T9693] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 310.260129][ T2459] loop4: lost filesystem error report for type 5 error -117 [ 310.269197][ T9693] loop4: lost filesystem error report for type 5 error -117 [ 310.299278][ T9693] EXT4-fs (loop4): 1 orphan inode deleted [ 310.301347][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.307135][ T9693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.432292][ T9707] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1465'. [ 310.659142][ T9713] loop2: detected capacity change from 0 to 128 [ 310.703734][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.787426][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'. [ 310.840018][ T9721] FAULT_INJECTION: forcing a failure. [ 310.840018][ T9721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.853641][ T9721] CPU: 0 UID: 0 PID: 9721 Comm: syz.8.1470 Not tainted syzkaller #0 PREEMPT(lazy) [ 310.853674][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.853689][ T9721] Call Trace: [ 310.853745][ T9721] [ 310.853754][ T9721] __dump_stack+0x1d/0x30 [ 310.853926][ T9721] dump_stack_lvl+0x95/0xd0 [ 310.853952][ T9721] dump_stack+0x15/0x1b [ 310.854042][ T9721] should_fail_ex+0x25e/0x270 [ 310.854076][ T9721] should_fail+0xb/0x20 [ 310.854105][ T9721] should_fail_usercopy+0x1a/0x20 [ 310.854138][ T9721] _copy_from_iter+0xcc/0xe70 [ 310.854183][ T9721] ? __alloc_skb+0x511/0x6f0 [ 310.854212][ T9721] ? __alloc_skb+0x205/0x6f0 [ 310.854241][ T9721] netlink_sendmsg+0x4a4/0x6f0 [ 310.854270][ T9721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.854353][ T9721] ____sys_sendmsg+0x532/0x580 [ 310.854421][ T9721] ___sys_sendmsg+0x195/0x1e0 [ 310.854468][ T9721] __x64_sys_sendmsg+0xd4/0x160 [ 310.854523][ T9721] x64_sys_call+0x194c/0x3020 [ 310.854624][ T9721] do_syscall_64+0x136/0x3c0 [ 310.854660][ T9721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.854688][ T9721] RIP: 0033:0x7f80a470ce59 [ 310.854710][ T9721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.854795][ T9721] RSP: 002b:00007f80a3167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.854822][ T9721] RAX: ffffffffffffffda RBX: 00007f80a4985fa0 RCX: 00007f80a470ce59 [ 310.854840][ T9721] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 310.854857][ T9721] RBP: 00007f80a3167090 R08: 0000000000000000 R09: 0000000000000000 [ 310.854878][ T9721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.854894][ T9721] R13: 00007f80a4986038 R14: 00007f80a4985fa0 R15: 00007ffd91fa5968 [ 310.854914][ T9721] [ 313.037015][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 313.037034][ T28] audit: type=1400 audit(1782392895.833:1154): avc: denied { remount } for pid=9732 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 313.259242][ T9736] xt_hashlimit: size too large, truncated to 1048576 [ 313.402538][ T9739] loop3: detected capacity change from 0 to 1024 [ 313.412885][ T9740] @ÿ: renamed from bond_slave_0 (while UP) [ 313.585988][ T9739] EXT4-fs: Ignoring removed bh option [ 313.673567][ T9739] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 313.741232][ T9739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.101117][ T28] audit: type=1400 audit(1782392896.903:1155): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 314.151336][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.260394][ T9758] sctp: [Deprecated]: syz.8.1482 (pid 9758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.260394][ T9758] Use struct sctp_sack_info instead [ 314.398745][ T9758] lo speed is unknown, defaulting to 1000 [ 315.318215][ T9770] loop3: detected capacity change from 0 to 512 [ 315.337475][ T9770] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.1487: Unrecognised inode hash code 255 [ 315.377431][ T9770] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1487: Corrupt directory, running e2fsck is recommended [ 315.563455][ T9770] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 315.624509][ T9770] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1487: corrupted in-inode xattr: e_name out of bounds [ 315.678587][ T9770] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 315.688555][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 315.704508][ C1] EXT4-fs (loop3): initial error at time 1782392898: ext4_iget_extra_inode:5180: inode 15 [ 315.714785][ C1] EXT4-fs (loop3): last error at time 1782392898: ext4_iget_extra_inode:5180: inode 15 [ 315.908367][ T9770] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1487: couldn't read orphan inode 15 (err -117) [ 316.018572][ T9770] loop3: lost filesystem error report for type 5 error -117 [ 316.042746][ T9770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.459355][ T9770] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.1487: Unrecognised inode hash code 255 [ 316.536398][ T9770] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1487: Corrupt directory, running e2fsck is recommended [ 316.733428][ T9770] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.1487: Unrecognised inode hash code 255 [ 316.944957][ T9770] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1487: Corrupt directory, running e2fsck is recommended [ 317.004583][ T9770] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.1487: path /325/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 317.149300][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.780178][ T9792] loop2: detected capacity change from 0 to 512 [ 317.902708][ T9792] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1496: bg 0: block 169: padding at end of block bitmap is not set [ 317.917489][ T9792] loop2: lost filesystem error report for type 5 error -117 [ 317.917797][ T9792] Quota error (device loop2): write_blk: dquota write failed [ 317.925318][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 317.925345][ C0] EXT4-fs (loop2): initial error at time 1782392900: ext4_validate_block_bitmap:441 [ 317.925373][ C0] EXT4-fs (loop2): last error at time 1782392900: ext4_validate_block_bitmap:441 [ 317.973575][ T9792] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 318.013761][ T9799] xt_hashlimit: size too large, truncated to 1048576 [ 318.023035][ T9792] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1496: Failed to acquire dquot type 0 [ 318.110535][ T9792] loop2: lost filesystem error report for type 5 error -117 [ 318.115510][ T9792] EXT4-fs (loop2): 1 truncate cleaned up [ 318.150131][ T9792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.201558][ T9792] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.526931][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.962064][ T9811] sctp: [Deprecated]: syz.7.1500 (pid 9811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.962064][ T9811] Use struct sctp_sack_info instead [ 319.086436][ T9809] lo speed is unknown, defaulting to 1000 [ 319.234932][ T9814] lo speed is unknown, defaulting to 1000 [ 319.865552][ T9820] loop8: detected capacity change from 0 to 4096 [ 320.408790][ T9820] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.482034][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.491993][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.512612][ T28] audit: type=1400 audit(1782392903.243:1156): avc: denied { write } for pid=9815 comm="syz.8.1501" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.732397][ T9826] loop2: detected capacity change from 0 to 512 [ 320.848819][ T9827] loop7: detected capacity change from 0 to 1024 [ 320.951617][ T9826] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1502: Unrecognised inode hash code 255 [ 321.041964][ T9827] EXT4-fs: Ignoring removed bh option [ 321.202303][ T9827] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 321.338271][ T9826] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1502: Corrupt directory, running e2fsck is recommended [ 321.432954][ T9827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.496042][ T9826] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 321.504645][ T9826] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1502: corrupted in-inode xattr: e_name out of bounds [ 321.518792][ T9826] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 321.519021][ T9826] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1502: couldn't read orphan inode 15 (err -117) [ 321.540405][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 321.540467][ C0] EXT4-fs (loop2): initial error at time 1782392904: ext4_iget_extra_inode:5180: inode 15 [ 321.540502][ C0] EXT4-fs (loop2): last error at time 1782392904: ext4_iget_extra_inode:5180: inode 15 [ 321.566880][ T9826] loop2: lost filesystem error report for type 5 error -117 [ 321.571112][ T9826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.817513][ T9824] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1502: Unrecognised inode hash code 255 [ 321.830184][ T9824] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1502: Corrupt directory, running e2fsck is recommended [ 321.946390][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.976267][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.140545][ T9834] sctp: [Deprecated]: syz.2.1504 (pid 9834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.140545][ T9834] Use struct sctp_sack_info instead [ 322.300054][ T9833] lo speed is unknown, defaulting to 1000 [ 322.647118][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.147031][ T9849] loop2: detected capacity change from 0 to 512 [ 324.157702][ T9849] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1508: Unrecognised inode hash code 255 [ 324.169581][ T9849] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1508: Corrupt directory, running e2fsck is recommended [ 324.225841][ T9849] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 324.236378][ T9849] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1508: corrupted in-inode xattr: e_name out of bounds [ 324.268626][ T9849] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 324.268857][ T9849] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1508: couldn't read orphan inode 15 (err -117) [ 324.289974][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 324.289993][ C1] EXT4-fs (loop2): initial error at time 1782392907: ext4_iget_extra_inode:5180: inode 15 [ 324.290045][ C1] EXT4-fs (loop2): last error at time 1782392907: ext4_iget_extra_inode:5180: inode 15 [ 324.530855][ T9849] loop2: lost filesystem error report for type 5 error -117 [ 324.531431][ T9849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.867050][ T9848] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1508: Unrecognised inode hash code 255 [ 324.890189][ T9848] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1508: Corrupt directory, running e2fsck is recommended [ 324.978160][ T9858] sctp: [Deprecated]: syz.8.1510 (pid 9858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.978160][ T9858] Use struct sctp_sack_info instead [ 325.003217][ T28] audit: type=1400 audit(1782392907.773:1157): avc: denied { recv } for pid=9835 comm="syz.7.1505" saddr=10.128.0.163 src=35538 daddr=10.128.0.199 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 325.211238][ T9848] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1508: Unrecognised inode hash code 255 [ 325.265628][ T9848] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1508: Corrupt directory, running e2fsck is recommended [ 325.398709][ T9848] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 4: comm syz.2.1508: path /345/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 325.712916][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.801300][ T9857] lo speed is unknown, defaulting to 1000 [ 325.888599][ T9861] xt_hashlimit: size too large, truncated to 1048576 [ 325.996082][ T9863] @ÿ: renamed from bond_slave_0 (while UP) [ 326.412282][ T9865] loop7: detected capacity change from 0 to 512 [ 326.453310][ T9865] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1512: Unrecognised inode hash code 255 [ 326.465098][ T9865] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1512: Corrupt directory, running e2fsck is recommended [ 326.479569][ T9865] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 326.487891][ T9865] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1512: corrupted in-inode xattr: e_name out of bounds [ 326.503580][ T9865] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 326.505191][ T9865] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1512: couldn't read orphan inode 15 (err -117) [ 326.526244][ T9865] loop7: lost filesystem error report for type 5 error -117 [ 326.650608][ T9865] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.683748][ T9865] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1512: Unrecognised inode hash code 255 [ 326.695261][ T9865] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1512: Corrupt directory, running e2fsck is recommended [ 326.710718][ T9865] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1512: Unrecognised inode hash code 255 [ 326.722223][ T9865] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1512: Corrupt directory, running e2fsck is recommended [ 326.737184][ T9865] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 4: comm syz.7.1512: path /139/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 326.769458][ T9865] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 8: comm syz.7.1512: path /139/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 327.206707][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.295564][ T9878] loop8: detected capacity change from 0 to 1024 [ 327.312748][ T9878] EXT4-fs: Ignoring removed bh option [ 327.331488][ T9878] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 327.460124][ T9878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.897316][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.504883][ T9896] loop7: detected capacity change from 0 to 512 [ 328.591949][ T9896] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1519: Unrecognised inode hash code 255 [ 328.604023][ T9896] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1519: Corrupt directory, running e2fsck is recommended [ 328.620052][ T9896] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 328.628270][ T9896] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1519: corrupted in-inode xattr: e_name out of bounds [ 328.642194][ T9896] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 328.665958][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 328.683985][ C0] EXT4-fs (loop7): initial error at time 1782392911: ext4_iget_extra_inode:5180: inode 15 [ 328.693951][ C0] EXT4-fs (loop7): last error at time 1782392911: ext4_iget_extra_inode:5180: inode 15 [ 328.758253][ T9896] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1519: couldn't read orphan inode 15 (err -117) [ 328.800302][ T9896] loop7: lost filesystem error report for type 5 error -117 [ 328.801030][ T9896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.913459][ T9903] loop8: detected capacity change from 0 to 1024 [ 328.928560][ T9896] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1519: Unrecognised inode hash code 255 [ 328.940107][ T9896] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1519: Corrupt directory, running e2fsck is recommended [ 328.951462][ T9903] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.006307][ T9903] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.1520: Invalid block bitmap block 0 in block_group 0 [ 329.021656][ T9900] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set [ 329.069902][ T9903] loop8: lost filesystem error report for type 5 error -117 [ 329.073042][ T9903] Quota error (device loop8): write_blk: dquota write failed [ 329.080737][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 329.080839][ C0] EXT4-fs (loop8): initial error at time 1782392911: ext4_read_block_bitmap_nowait:483 [ 329.081040][ C0] EXT4-fs (loop8): last error at time 1782392911: ext4_read_block_bitmap_nowait:483 [ 329.089492][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.129078][ T9903] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 329.142055][ T9903] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.1520: Failed to acquire dquot type 0 [ 329.154140][ T9903] loop8: lost filesystem error report for type 5 error -117 [ 329.155957][ T9903] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.1520: Freeing blocks not in datazone - block = 0, count = 4096 [ 329.190355][ T9903] loop8: lost filesystem error report for type 5 error -117 [ 329.196226][ T9903] EXT4-fs error (device loop8): ext4_read_inode_bitmap:141: comm syz.8.1520: Invalid inode bitmap blk 0 in block_group 0 [ 329.220723][ T5606] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-7 [ 329.248539][ T5606] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 329.260171][ T9903] loop8: lost filesystem error report for type 5 error -117 [ 329.261389][ T9903] EXT4-fs error (device loop8) in ext4_free_inode:363: Corrupt filesystem [ 329.276648][ T9907] loop7: detected capacity change from 0 to 512 [ 329.278179][ T5606] loop8: lost filesystem error report for type 5 error -117 [ 329.291326][ T9903] loop8: lost filesystem error report for type 5 error -117 [ 329.310969][ T9903] EXT4-fs (loop8): 1 orphan inode deleted [ 329.348178][ T9907] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1521: Unrecognised inode hash code 255 [ 329.370857][ T9907] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1521: Corrupt directory, running e2fsck is recommended [ 329.412416][ T9903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.413787][ T9907] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 329.433689][ T9907] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1521: corrupted in-inode xattr: e_name out of bounds [ 329.447901][ T9907] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 329.449295][ T9907] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1521: couldn't read orphan inode 15 (err -117) [ 329.458505][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 329.458526][ C0] EXT4-fs (loop7): initial error at time 1782392912: ext4_iget_extra_inode:5180: inode 15 [ 329.458570][ C0] EXT4-fs (loop7): last error at time 1782392912: ext4_iget_extra_inode:5180: inode 15 [ 329.566831][ T9907] loop7: lost filesystem error report for type 5 error -117 [ 329.569771][ T9907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.879276][ T9923] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1521: Unrecognised inode hash code 255 [ 329.891275][ T9914] lo speed is unknown, defaulting to 1000 [ 329.903315][ T9923] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1521: Corrupt directory, running e2fsck is recommended [ 329.944881][ T5606] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.979065][ T5606] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.122895][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.143044][ T9906] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1521: Unrecognised inode hash code 255 [ 330.154643][ T9906] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1521: Corrupt directory, running e2fsck is recommended [ 330.167569][ T9906] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 4: comm syz.7.1521: path /143/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 330.205920][ T5606] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.227615][ T5606] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.238744][ T9906] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 8: comm syz.7.1521: path /143/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 330.309507][ T9925] sctp: [Deprecated]: syz.2.1523 (pid 9925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.309507][ T9925] Use struct sctp_sack_info instead [ 330.430009][ T9900] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set [ 330.477834][ T5606] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.531432][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.540651][ T5606] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.193738][ T5606] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.214954][ T5606] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.248937][ T9925] lo speed is unknown, defaulting to 1000 [ 331.455206][ T9914] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.462671][ T9914] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.470856][ T9914] bridge_slave_0: entered allmulticast mode [ 331.498275][ T28] audit: type=1400 audit(1782392914.293:1158): avc: denied { listen } for pid=9946 comm="syz.7.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.545744][ T9914] bridge_slave_0: entered promiscuous mode [ 331.560018][ T28] audit: type=1400 audit(1782392914.303:1159): avc: denied { accept } for pid=9946 comm="syz.7.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.674830][ T9914] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.688658][ T9945] loop8: detected capacity change from 0 to 8192 [ 331.696603][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.238377][ T9914] bridge_slave_1: entered allmulticast mode [ 332.278947][ T9914] bridge_slave_1: entered promiscuous mode [ 332.286276][ T5606] bridge_slave_1: left allmulticast mode [ 332.298236][ T5606] bridge_slave_1: left promiscuous mode [ 332.311230][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.330295][ T5606] bridge_slave_0: left allmulticast mode [ 332.336075][ T5606] bridge_slave_0: left promiscuous mode [ 332.345960][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.509582][ T9958] netlink: 'syz.7.1533': attribute type 1 has an invalid length. [ 332.547345][ T5606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.558118][ T5606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.565023][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1533'. [ 332.579459][ T5606] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 332.589301][ T5606] bond0 (unregistering): Released all slaves [ 332.613738][ T9914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.652386][ T9958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.665708][ T9914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.726607][ T9914] team0: Port device team_slave_0 added [ 332.737210][ T9914] team0: Port device team_slave_1 added [ 332.787465][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.797387][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.825985][ T9914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.847178][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.858540][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.893879][ T9914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.924296][ T9959] lo speed is unknown, defaulting to 1000 [ 332.956983][ T9978] loop7: detected capacity change from 0 to 1024 [ 332.972200][ T5606] tipc: Left network mode [ 333.018017][ T9978] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 333.066632][ T5606] hsr_slave_0: left promiscuous mode [ 333.074275][ T5606] hsr_slave_1: left promiscuous mode [ 333.075280][ T9978] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1538: Invalid block bitmap block 0 in block_group 0 [ 333.082075][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.094380][ T9978] loop7: lost filesystem error report for type 5 error -117 [ 333.108561][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 333.121703][ T9978] Quota error (device loop7): write_blk: dquota write failed [ 333.123040][ C0] EXT4-fs (loop7): initial error at time 1782392915: ext4_read_block_bitmap_nowait:483 [ 333.123068][ C0] EXT4-fs (loop7): last error at time 1782392915: ext4_read_block_bitmap_nowait:483 [ 333.202851][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.210769][ T28] audit: type=1400 audit(1782392915.983:1160): avc: denied { write } for pid=9969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.240745][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.285388][ T9997] loop2: detected capacity change from 0 to 512 [ 333.299725][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.311764][ T9978] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 333.350184][ T5606] veth1_macvtap: left promiscuous mode [ 333.361597][ T28] audit: type=1400 audit(1782392916.163:1161): avc: denied { write } for pid=10001 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.389943][ T9997] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1539: Unrecognised inode hash code 255 [ 333.403595][ T9978] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1538: Failed to acquire dquot type 0 [ 333.421669][ T5606] veth0_macvtap: left promiscuous mode [ 333.430915][ T9997] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1539: Corrupt directory, running e2fsck is recommended [ 333.451824][ T5606] veth1_vlan: left promiscuous mode [ 333.501816][ T9978] loop7: lost filesystem error report for type 5 error -117 [ 333.512646][ T5606] veth0_vlan: left promiscuous mode [ 333.530290][ T9978] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.1538: Freeing blocks not in datazone - block = 0, count = 4096 [ 333.551679][ T9997] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 333.560555][ T9997] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1539: corrupted in-inode xattr: e_name out of bounds [ 333.565621][ T9978] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.1538: Invalid inode bitmap blk 0 in block_group 0 [ 333.575024][ T9997] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 333.575215][ T9997] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1539: couldn't read orphan inode 15 (err -117) [ 333.575839][ T9997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.624320][ T8916] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 333.628460][ T9978] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 333.633843][ T8916] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:19: Failed to release dquot type 0 [ 333.643037][ T9978] EXT4-fs (loop7): 1 orphan inode deleted [ 333.664107][ T9978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.945559][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.048422][T10010] loop8: detected capacity change from 0 to 512 [ 334.066005][T10010] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1542: Unrecognised inode hash code 255 [ 334.077903][T10010] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1542: Corrupt directory, running e2fsck is recommended [ 334.091374][ T5606] team0 (unregistering): Port device team_slave_1 removed [ 334.102307][T10010] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 334.110628][T10010] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.1542: corrupted in-inode xattr: e_name out of bounds [ 334.129137][T10010] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 334.129483][ T5606] team0 (unregistering): Port device team_slave_0 removed [ 334.145994][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 334.146016][ C0] EXT4-fs (loop8): initial error at time 1782392916: ext4_iget_extra_inode:5180: inode 15 [ 334.146049][ C0] EXT4-fs (loop8): last error at time 1782392916: ext4_iget_extra_inode:5180: inode 15 [ 334.169473][T10010] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1542: couldn't read orphan inode 15 (err -117) [ 334.184700][T10010] fserror_report: 5 callbacks suppressed [ 334.184715][T10010] loop8: lost filesystem error report for type 5 error -117 [ 334.192167][ T28] audit: type=1400 audit(1782392916.993:1162): avc: denied { audit_write } for pid=10007 comm="syz.7.1541" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 334.222213][T10012] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1541'. [ 334.232323][ T28] audit: type=1107 audit(1782392916.993:1163): pid=10007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 334.232468][T10009] loop0: detected capacity change from 512 to 511 [ 334.256154][T10010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.279276][ T9914] hsr_slave_0: entered promiscuous mode [ 334.292074][T10008] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1542: Unrecognised inode hash code 255 [ 334.301485][ T9914] hsr_slave_1: entered promiscuous mode [ 334.303578][T10008] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1542: Corrupt directory, running e2fsck is recommended [ 334.336895][ T9914] debugfs: 'hsr0' already exists in 'hsr' [ 334.349108][ T9914] Cannot create hsr debugfs directory [ 334.365977][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 334.385056][ T9986] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1539: Unrecognised inode hash code 255 [ 334.385605][ T985] lo speed is unknown, defaulting to 1000 [ 334.385628][ T985] infiniband syz2: ib_query_port failed (-19) [ 334.423578][ T9986] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1539: Corrupt directory, running e2fsck is recommended [ 334.437214][T10010] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1542: Unrecognised inode hash code 255 [ 334.448751][T10010] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1542: Corrupt directory, running e2fsck is recommended [ 334.461653][T10010] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 4: comm syz.8.1542: path /81/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 334.484648][T10010] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 8: comm syz.8.1542: path /81/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 334.537200][ T9997] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1539: Unrecognised inode hash code 255 [ 334.574602][ T9997] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1539: Corrupt directory, running e2fsck is recommended [ 334.641430][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.651523][ T9997] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 4: comm syz.2.1539: path /352/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 334.673269][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.687630][ T9959] bridge_slave_0: entered allmulticast mode [ 334.695818][ T9997] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.1539: path /352/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 334.709582][ T9959] bridge_slave_0: entered promiscuous mode [ 334.727192][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.827100][ T28] audit: type=1400 audit(1782392917.623:1164): avc: denied { write } for pid=10023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.855438][T10028] sctp: [Deprecated]: syz.7.1544 (pid 10028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.855438][T10028] Use struct sctp_sack_info instead [ 334.883440][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.907109][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.914816][ T9959] bridge_slave_1: entered allmulticast mode [ 334.944997][ T9959] bridge_slave_1: entered promiscuous mode [ 334.950213][ T28] audit: type=1400 audit(1782392917.753:1165): avc: denied { write } for pid=10039 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.951773][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.010723][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.022536][ T9914] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 335.174006][ T9914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.183512][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 335.199314][ T5606] IPVS: stop unused estimator thread 0... [ 335.224577][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.266666][ T9914] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 335.320553][ T9914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.419787][ T9914] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 335.429056][ T9914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.459371][ T9959] team0: Port device team_slave_0 added [ 335.487681][T10045] loop2: detected capacity change from 0 to 512 [ 335.497378][ T9914] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 335.525524][ T9914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.547973][ T9959] team0: Port device team_slave_1 added [ 335.555529][T10045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.571734][T10045] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.590564][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.597874][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.625534][ T28] audit: type=1400 audit(1782392918.433:1166): avc: denied { write } for pid=10046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.634504][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.690069][ T28] audit: type=1400 audit(1782392918.483:1167): avc: denied { write } for pid=10064 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.734361][T10067] netlink: 'syz.8.1546': attribute type 4 has an invalid length. [ 335.740098][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.750229][T10067] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.1546'. [ 335.752657][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.788603][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.801744][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 335.865681][ T9959] hsr_slave_0: entered promiscuous mode [ 335.873472][ T9959] hsr_slave_1: entered promiscuous mode [ 335.879716][ T9959] debugfs: 'hsr0' already exists in 'hsr' [ 335.886202][ T9959] Cannot create hsr debugfs directory [ 335.907552][ T9914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.966081][ T9914] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.006743][ T2459] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.014023][ T2459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.036459][ T8916] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.043692][ T8916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.090537][ T28] audit: type=1400 audit(1782392918.883:1168): avc: denied { write } for pid=10072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.161029][T10092] futex_wake_op: syz.7.1550 tries to shift op by 144; fix this program [ 336.187457][ T28] audit: type=1400 audit(1782392918.983:1169): avc: denied { write } for pid=10096 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.283608][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 336.294960][T10100] sctp: [Deprecated]: syz.7.1551 (pid 10100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.294960][T10100] Use struct sctp_sack_info instead [ 336.439826][ T9914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.505358][ T28] audit: type=1400 audit(1782392919.303:1170): avc: denied { write } for pid=10108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.529298][ T9959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.549912][ T9959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.560699][ T9959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.578794][ T9959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.581948][ T28] audit: type=1400 audit(1782392919.373:1171): avc: denied { write } for pid=10127 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.591462][ T9959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.665436][ T9959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.684455][ T9959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.700813][ T9959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.829420][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.850826][ T9914] veth0_vlan: entered promiscuous mode [ 336.886275][ T9959] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.899328][ T9914] veth1_vlan: entered promiscuous mode [ 336.912178][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.919343][ T8916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.929657][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.954312][ T2459] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.961476][ T2459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.014061][T10158] loop2: detected capacity change from 0 to 1024 [ 337.038770][ T9914] veth0_macvtap: entered promiscuous mode [ 337.061286][ T9914] veth1_macvtap: entered promiscuous mode [ 337.068402][T10158] EXT4-fs: inline encryption not supported [ 337.103218][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.122299][T10158] EXT4-fs (loop2): orphan cleanup on readonly fs [ 337.136675][T10158] EXT4-fs (loop2): 1 truncate cleaned up [ 337.143489][T10158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.174083][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.221955][ T8927] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.303277][ T8927] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.399693][ T8927] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.422410][ T8927] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.007110][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.173104][ T9959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.251581][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 339.251597][ T28] audit: type=1400 audit(1782392922.053:1179): avc: denied { write } for pid=10191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.284304][T10207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1553'. [ 339.335750][ T28] audit: type=1400 audit(1782392922.133:1180): avc: denied { write } for pid=10223 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.991469][T10228] loop8: detected capacity change from 0 to 4096 [ 341.056686][T10228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.069560][T10227] loop7: detected capacity change from 0 to 512 [ 341.085878][ T28] audit: type=1400 audit(1782392923.883:1181): avc: denied { write } for pid=10210 comm="syz.8.1554" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.177239][T10227] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1555: Unrecognised inode hash code 255 [ 341.204502][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1556'. [ 341.204726][ T9959] veth0_vlan: entered promiscuous mode [ 341.213411][T10246] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1556'. [ 341.255778][T10227] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1555: Corrupt directory, running e2fsck is recommended [ 341.272499][ T9959] veth1_vlan: entered promiscuous mode [ 341.289007][ T9959] veth0_macvtap: entered promiscuous mode [ 341.297137][ T9959] veth1_macvtap: entered promiscuous mode [ 341.310998][T10227] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 341.316054][ T28] audit: type=1400 audit(1782392924.053:1182): avc: denied { write } for pid=10229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.321026][T10227] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1555: corrupted in-inode xattr: e_name out of bounds [ 341.348675][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.385757][T10227] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 341.388167][T10227] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1555: couldn't read orphan inode 15 (err -117) [ 341.397629][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 341.397654][ C1] EXT4-fs (loop7): initial error at time 1782392924: ext4_iget_extra_inode:5180: inode 15 [ 341.397685][ C1] EXT4-fs (loop7): last error at time 1782392924: ext4_iget_extra_inode:5180: inode 15 [ 341.417224][ T28] audit: type=1400 audit(1782392924.213:1183): avc: denied { write } for pid=10256 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.432324][T10227] loop7: lost filesystem error report for type 5 error -117 [ 341.461303][T10227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.478922][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.513034][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.532157][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.532564][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.549888][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.594375][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.769053][T10264] tc action pedit offset must be on 32 bit boundaries [ 342.783687][T10264] loop9: detected capacity change from 0 to 4096 [ 343.456206][ T28] audit: type=1400 audit(1782392926.253:1184): avc: denied { write } for pid=10260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.522509][ T28] audit: type=1400 audit(1782392926.313:1185): avc: denied { write } for pid=10285 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.690185][T10281] loop2: detected capacity change from 0 to 4096 [ 343.749220][T10295] loop1: detected capacity change from 0 to 512 [ 343.756682][T10264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.823926][T10295] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1534: Unrecognised inode hash code 255 [ 343.835536][T10295] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1534: Corrupt directory, running e2fsck is recommended [ 343.863307][ T28] audit: type=1400 audit(1782392926.623:1186): avc: denied { write } for pid=10261 comm="syz.9.1562" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.902244][T10222] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1555: Unrecognised inode hash code 255 [ 343.913991][T10222] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1555: Corrupt directory, running e2fsck is recommended [ 343.967421][T10295] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 343.970470][T10281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.975816][T10295] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1534: corrupted in-inode xattr: e_name out of bounds [ 343.975871][T10295] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 343.975966][ T28] audit: type=1400 audit(1782392926.753:1187): avc: denied { write } for pid=10287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.984262][ T28] audit: type=1400 audit(1782392926.783:1188): avc: denied { write } for pid=10302 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.985751][T10295] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1534: couldn't read orphan inode 15 (err -117) [ 343.985782][T10295] loop1: lost filesystem error report for type 5 error -117 [ 343.986693][T10295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.040071][T10227] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1555: Unrecognised inode hash code 255 [ 344.040106][T10227] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1555: Corrupt directory, running e2fsck is recommended [ 344.040148][T10227] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 4: comm syz.7.1555: path /157/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 344.042083][T10227] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 8: comm syz.7.1555: path /157/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 344.269458][T10295] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1534: Unrecognised inode hash code 255 [ 344.284860][T10295] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1534: Corrupt directory, running e2fsck is recommended [ 344.413518][ T28] audit: type=1400 audit(1782392927.213:1189): avc: denied { write } for pid=10271 comm="syz.2.1564" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.444511][T10295] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1534: Unrecognised inode hash code 255 [ 344.445112][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.466139][T10295] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1534: Corrupt directory, running e2fsck is recommended [ 344.517912][T10295] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.1534: path /0/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 344.539964][T10295] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.1534: path /0/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 344.578831][ T28] audit: type=1400 audit(1782392927.383:1190): avc: denied { write } for pid=10304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.715400][ T28] audit: type=1400 audit(1782392927.433:1191): avc: denied { write } for pid=10317 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.758117][ T9959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.837328][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.878834][T10326] loop1: detected capacity change from 0 to 512 [ 344.936705][ T9914] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.038077][ T28] audit: type=1400 audit(1782392927.833:1192): avc: denied { write } for pid=10319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.104102][T10339] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1568'. [ 345.152394][ T28] audit: type=1107 audit(1782392927.893:1193): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 345.214804][ T28] audit: type=1400 audit(1782392927.953:1194): avc: denied { write } for pid=10342 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.425243][T10349] syzkaller0: entered promiscuous mode [ 345.481753][T10349] syzkaller0: entered allmulticast mode [ 345.577601][ T28] audit: type=1400 audit(1782392928.373:1195): avc: denied { write } for pid=10346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.720777][T10365] loop9: detected capacity change from 0 to 4096 [ 345.870625][T10365] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.029976][ T28] audit: type=1400 audit(1782392928.703:1196): avc: denied { write } for pid=10355 comm="syz.9.1572" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.205359][T10368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1573'. [ 346.639942][T10375] loop2: detected capacity change from 0 to 512 [ 346.739831][T10375] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1575: Unrecognised inode hash code 255 [ 346.788004][T10375] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1575: Corrupt directory, running e2fsck is recommended [ 346.841057][T10375] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 346.884899][T10375] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1575: corrupted in-inode xattr: e_name out of bounds [ 346.948364][T10375] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 346.948495][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 346.964095][ C1] EXT4-fs (loop2): initial error at time 1782392929: ext4_iget_extra_inode:5180: inode 15 [ 346.974072][ C1] EXT4-fs (loop2): last error at time 1782392929: ext4_iget_extra_inode:5180: inode 15 [ 347.019797][T10379] loop1: detected capacity change from 0 to 512 [ 347.109564][T10379] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1576: Unrecognised inode hash code 255 [ 347.130277][T10375] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1575: couldn't read orphan inode 15 (err -117) [ 347.172847][T10375] loop2: lost filesystem error report for type 5 error -117 [ 347.173512][T10375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.213795][T10379] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1576: Corrupt directory, running e2fsck is recommended [ 347.245611][ T28] audit: type=1400 audit(1782392930.033:1197): avc: denied { write } for pid=10370 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.287453][T10379] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 347.320817][T10379] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1576: corrupted in-inode xattr: e_name out of bounds [ 347.362811][ T9914] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.377932][T10379] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 347.378499][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 347.394153][ C0] EXT4-fs (loop1): initial error at time 1782392930: ext4_iget_extra_inode:5180: inode 15 [ 347.404124][ C0] EXT4-fs (loop1): last error at time 1782392930: ext4_iget_extra_inode:5180: inode 15 [ 347.414981][T10379] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1576: couldn't read orphan inode 15 (err -117) [ 347.436986][T10379] loop1: lost filesystem error report for type 5 error -117 [ 347.437683][T10379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.456426][T10374] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1575: Unrecognised inode hash code 255 [ 347.482947][T10374] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1575: Corrupt directory, running e2fsck is recommended [ 347.518191][T10374] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1575: Unrecognised inode hash code 255 [ 347.529974][T10374] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1575: Corrupt directory, running e2fsck is recommended [ 347.542872][T10374] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 4: comm syz.2.1575: path /365/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 347.563641][T10374] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.1575: path /365/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 347.592275][ T28] audit: type=1400 audit(1782392930.393:1198): avc: denied { write } for pid=10382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.659479][T10394] loop9: detected capacity change from 0 to 512 [ 347.699190][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.729165][T10394] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1577: Unrecognised inode hash code 255 [ 347.865650][T10394] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1577: Corrupt directory, running e2fsck is recommended [ 347.871434][T10399] ip6erspan0: entered allmulticast mode [ 347.906669][T10394] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 347.936903][T10394] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.1577: corrupted in-inode xattr: e_name out of bounds [ 347.979317][T10394] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 347.979590][T10394] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1577: couldn't read orphan inode 15 (err -117) [ 347.988836][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 347.988855][ C0] EXT4-fs (loop9): initial error at time 1782392930: ext4_iget_extra_inode:5180: inode 15 [ 347.988884][ C0] EXT4-fs (loop9): last error at time 1782392930: ext4_iget_extra_inode:5180: inode 15 [ 348.061522][T10394] loop9: lost filesystem error report for type 5 error -117 [ 348.088990][T10394] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.264695][T10378] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1576: Unrecognised inode hash code 255 [ 348.276400][T10378] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1576: Corrupt directory, running e2fsck is recommended [ 348.294846][T10378] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1576: Unrecognised inode hash code 255 [ 348.306477][T10378] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1576: Corrupt directory, running e2fsck is recommended [ 348.319399][T10378] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.1576: path /3/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 348.341518][T10378] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.1576: path /3/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 348.521243][ T9959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.119322][T10468] loop2: detected capacity change from 0 to 512 [ 349.159838][T10468] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1583: Unrecognised inode hash code 255 [ 349.164268][T10389] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1577: Unrecognised inode hash code 255 [ 349.172344][T10468] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1583: Corrupt directory, running e2fsck is recommended [ 349.227497][T10468] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 349.235946][T10468] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1583: corrupted in-inode xattr: e_name out of bounds [ 349.249607][T10389] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1577: Corrupt directory, running e2fsck is recommended [ 349.277355][T10468] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 349.277573][T10468] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1583: couldn't read orphan inode 15 (err -117) [ 349.286774][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 349.286796][ C0] EXT4-fs (loop2): initial error at time 1782392932: ext4_iget_extra_inode:5180: inode 15 [ 349.286832][ C0] EXT4-fs (loop2): last error at time 1782392932: ext4_iget_extra_inode:5180: inode 15 [ 349.339303][T10468] loop2: lost filesystem error report for type 5 error -117 [ 349.339944][T10468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.487131][T10483] @ÿ: renamed from bond_slave_0 (while UP) [ 349.605475][T10394] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1577: Unrecognised inode hash code 255 [ 349.618035][T10394] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1577: Corrupt directory, running e2fsck is recommended [ 349.631082][T10394] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 4: comm syz.9.1577: path /6/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 349.660025][T10464] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1583: Unrecognised inode hash code 255 [ 349.671546][T10464] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1583: Corrupt directory, running e2fsck is recommended [ 349.677469][T10394] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 8: comm syz.9.1577: path /6/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 349.684551][T10464] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 4: comm syz.2.1583: path /369/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 349.729282][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 349.729302][ T28] audit: type=1400 audit(1782392932.513:1210): avc: denied { write } for pid=10475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.774337][T10464] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.1583: path /369/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 349.804287][ T28] audit: type=1400 audit(1782392932.603:1211): avc: denied { write } for pid=10494 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.955493][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.967515][ T9914] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.968581][ T11] bridge0: entered promiscuous mode [ 349.984795][T10501] sctp: [Deprecated]: syz.8.1586 (pid 10501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.984795][T10501] Use struct sctp_sack_info instead [ 350.020385][T10505] loop1: detected capacity change from 0 to 2048 [ 350.071717][T10505] loop1: p1 < > p3 [ 350.076590][T10505] loop1: p3 size 134217728 extends beyond EOD, truncated [ 350.177101][T10520] loop9: detected capacity change from 0 to 512 [ 350.197231][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 350.228313][ T9961] udevd[9961]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 350.255696][ T28] audit: type=1400 audit(1782392933.053:1212): avc: denied { write } for pid=10499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.333296][T10520] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1591: Unrecognised inode hash code 255 [ 350.336728][ T28] audit: type=1400 audit(1782392933.133:1213): avc: denied { write } for pid=10524 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.344823][T10520] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1591: Corrupt directory, running e2fsck is recommended [ 350.351438][T10520] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 350.388579][T10520] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.1591: corrupted in-inode xattr: e_name out of bounds [ 350.402567][T10520] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 350.408515][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 350.424260][ C1] EXT4-fs (loop9): initial error at time 1782392933: ext4_iget_extra_inode:5180: inode 15 [ 350.434249][ C1] EXT4-fs (loop9): last error at time 1782392933: ext4_iget_extra_inode:5180: inode 15 [ 351.701671][T10520] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1591: couldn't read orphan inode 15 (err -117) [ 351.978268][T10520] loop9: lost filesystem error report for type 5 error -117 [ 352.026143][T10520] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.168418][T10529] loop2: detected capacity change from 0 to 4096 [ 352.184701][T10529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.237164][T10235] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set [ 352.237355][ T28] audit: type=1400 audit(1782392935.033:1214): avc: denied { write } for pid=10514 comm="syz.2.1588" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.321497][T10520] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1591: Unrecognised inode hash code 255 [ 352.380952][T10520] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1591: Corrupt directory, running e2fsck is recommended [ 352.384167][ T28] audit: type=1400 audit(1782392935.153:1215): avc: denied { write } for pid=10531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.439440][T10520] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 4: comm syz.9.1591: path /8/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 352.486866][ T28] audit: type=1400 audit(1782392935.283:1216): avc: denied { write } for pid=10547 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.552443][T10520] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 8: comm syz.9.1591: path /8/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 352.578524][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1595'. [ 352.631560][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1595'. [ 355.495750][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.536624][ T9914] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.596477][ T8927] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.605414][ T8927] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.621170][T10562] FAULT_INJECTION: forcing a failure. [ 355.621170][T10562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.634346][T10562] CPU: 0 UID: 0 PID: 10562 Comm: syz.9.1597 Not tainted syzkaller #0 PREEMPT(lazy) [ 355.634376][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.634434][T10562] Call Trace: [ 355.634442][T10562] [ 355.634450][T10562] __dump_stack+0x1d/0x30 [ 355.634503][T10562] dump_stack_lvl+0x95/0xd0 [ 355.634567][T10562] dump_stack+0x15/0x1b [ 355.634647][T10562] should_fail_ex+0x25e/0x270 [ 355.634679][T10562] should_fail+0xb/0x20 [ 355.634724][T10562] should_fail_usercopy+0x1a/0x20 [ 355.634752][T10562] _copy_to_user+0x20/0xa0 [ 355.634785][T10562] simple_read_from_buffer+0xb5/0x130 [ 355.634881][T10562] proc_fail_nth_read+0x10e/0x150 [ 355.634908][T10562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.634934][T10562] vfs_read+0x18e/0x7c0 [ 355.634967][T10562] ? kmem_cache_free+0xca/0x380 [ 355.635029][T10562] ? putname+0x7c/0xc0 [ 355.635056][T10562] ksys_read+0xdc/0x1a0 [ 355.635075][T10562] __x64_sys_read+0x40/0x50 [ 355.635093][T10562] x64_sys_call+0x2886/0x3020 [ 355.635156][T10562] do_syscall_64+0x136/0x3c0 [ 355.635192][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.635282][T10562] RIP: 0033:0x7fbd818cd68e [ 355.635302][T10562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 355.635323][T10562] RSP: 002b:00007fbd8035efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.635348][T10562] RAX: ffffffffffffffda RBX: 00007fbd8035f6c0 RCX: 00007fbd818cd68e [ 355.635363][T10562] RDX: 000000000000000f RSI: 00007fbd8035f0a0 RDI: 0000000000000004 [ 355.635376][T10562] RBP: 00007fbd8035f090 R08: 0000000000000000 R09: 0000000000000000 [ 355.635420][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.635436][T10562] R13: 00007fbd81b86038 R14: 00007fbd81b85fa0 R15: 00007ffeb536aa28 [ 355.635534][T10562] [ 355.655244][T10559] loop7: detected capacity change from 0 to 512 [ 355.715871][T10566] xt_hashlimit: size too large, truncated to 1048576 [ 355.948952][ T8927] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.949014][ T8927] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.959509][T10574] loop9: detected capacity change from 0 to 512 [ 357.850898][T10581] loop1: detected capacity change from 0 to 4096 [ 358.426693][T10593] loop8: detected capacity change from 0 to 4096 [ 358.441007][T10581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.587151][ T28] audit: type=1400 audit(1782392941.363:1217): avc: denied { write } for pid=10564 comm="syz.1.1600" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.789073][T10593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.010285][ T28] audit: type=1400 audit(1782392941.783:1218): avc: denied { write } for pid=10582 comm="syz.8.1603" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.035610][T10574] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 359.035807][T10574] EXT4-fs: failed to create workqueue [ 359.050688][T10574] EXT4-fs (loop9): mount failed [ 359.055930][T10559] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.1598: Unrecognised inode hash code 255 [ 359.067417][T10559] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1598: Corrupt directory, running e2fsck is recommended [ 359.124110][ T9959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.478876][T10559] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 359.487198][T10559] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1598: corrupted in-inode xattr: e_name out of bounds [ 359.501163][T10559] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 359.501528][T10559] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1598: couldn't read orphan inode 15 (err -117) [ 359.522628][T10559] loop7: lost filesystem error report for type 5 error -117 [ 359.523204][T10559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.553417][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.798815][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.856376][T10601] loop7: detected capacity change from 0 to 1024 [ 359.868545][T10601] EXT4-fs: inline encryption not supported [ 359.901376][T10601] EXT4-fs (loop7): orphan cleanup on readonly fs [ 359.913846][T10601] EXT4-fs (loop7): 1 truncate cleaned up [ 359.944743][T10601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.014983][T10609] loop8: detected capacity change from 0 to 512 [ 360.051378][T10601] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1606'. [ 360.092570][T10609] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1607: Unrecognised inode hash code 255 [ 360.120186][T10609] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1607: Corrupt directory, running e2fsck is recommended [ 360.193957][T10609] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 360.239328][T10609] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.1607: corrupted in-inode xattr: e_name out of bounds [ 360.279878][T10609] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 360.288562][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 360.304176][ C0] EXT4-fs (loop8): initial error at time 1782392943: ext4_iget_extra_inode:5180: inode 15 [ 360.314111][ C0] EXT4-fs (loop8): last error at time 1782392943: ext4_iget_extra_inode:5180: inode 15 [ 360.329906][T10609] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1607: couldn't read orphan inode 15 (err -117) [ 360.376002][T10609] loop8: lost filesystem error report for type 5 error -117 [ 360.413070][T10609] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.626555][T10620] FAULT_INJECTION: forcing a failure. [ 360.626555][T10620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.661004][T10620] CPU: 1 UID: 0 PID: 10620 Comm: syz.9.1610 Not tainted syzkaller #0 PREEMPT(lazy) [ 360.661048][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.661062][T10620] Call Trace: [ 360.661070][T10620] [ 360.661077][T10620] __dump_stack+0x1d/0x30 [ 360.661105][T10620] dump_stack_lvl+0x95/0xd0 [ 360.661131][T10620] dump_stack+0x15/0x1b [ 360.661202][T10620] should_fail_ex+0x25e/0x270 [ 360.661236][T10620] should_fail+0xb/0x20 [ 360.661341][T10620] should_fail_usercopy+0x1a/0x20 [ 360.661414][T10620] _copy_from_user+0x1c/0xb0 [ 360.661451][T10620] bpf_test_init+0xb9/0x130 [ 360.661523][T10620] bpf_prog_test_run_xdp+0x303/0x9e0 [ 360.661544][T10620] ? __rcu_read_unlock+0x4e/0x70 [ 360.661574][T10620] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 360.661600][T10620] bpf_prog_test_run+0x208/0x340 [ 360.661664][T10620] __sys_bpf+0x8da/0xc30 [ 360.661700][T10620] ? vfs_write+0x770/0x990 [ 360.661729][T10620] __x64_sys_bpf+0x69/0x80 [ 360.661825][T10620] x64_sys_call+0x10cb/0x3020 [ 360.661850][T10620] do_syscall_64+0x136/0x3c0 [ 360.661890][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.661916][T10620] RIP: 0033:0x7fbd8190ce59 [ 360.661936][T10620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.661969][T10620] RSP: 002b:00007fbd8035f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.661995][T10620] RAX: ffffffffffffffda RBX: 00007fbd81b85fa0 RCX: 00007fbd8190ce59 [ 360.662013][T10620] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 360.662030][T10620] RBP: 00007fbd8035f090 R08: 0000000000000000 R09: 0000000000000000 [ 360.662046][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.662062][T10620] R13: 00007fbd81b86038 R14: 00007fbd81b85fa0 R15: 00007ffeb536aa28 [ 360.662149][T10620] [ 360.920601][T10606] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1607: Unrecognised inode hash code 255 [ 360.932171][T10606] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1607: Corrupt directory, running e2fsck is recommended [ 360.951573][T10618] loop1: detected capacity change from 0 to 512 [ 360.964213][T10606] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1607: Unrecognised inode hash code 255 [ 360.975719][T10606] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1607: Corrupt directory, running e2fsck is recommended [ 360.988608][T10606] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 4: comm syz.8.1607: path /92/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 361.098569][T10606] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 8: comm syz.8.1607: path /92/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 361.118830][T10618] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1608: Unrecognised inode hash code 255 [ 361.130305][T10618] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1608: Corrupt directory, running e2fsck is recommended [ 361.227826][T10618] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 361.236070][T10618] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1608: corrupted in-inode xattr: e_name out of bounds [ 361.249904][T10618] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.326494][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 361.342096][ C0] EXT4-fs (loop1): initial error at time 1782392944: ext4_iget_extra_inode:5180: inode 15 [ 361.352036][ C0] EXT4-fs (loop1): last error at time 1782392944: ext4_iget_extra_inode:5180: inode 15 [ 361.365204][T10618] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1608: couldn't read orphan inode 15 (err -117) [ 361.382270][T10618] loop1: lost filesystem error report for type 5 error -117 [ 361.597703][T10618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.925073][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.936129][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.191470][T10618] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1608: Unrecognised inode hash code 255 [ 362.203016][T10618] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1608: Corrupt directory, running e2fsck is recommended [ 362.216073][T10618] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.1608: path /13/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 362.244127][T10618] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.1608: path /13/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 362.284019][T10635] loop9: detected capacity change from 0 to 512 [ 362.312988][ T9959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.616237][T10635] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 362.666363][T10635] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.692346][T10646] loop1: detected capacity change from 0 to 764 [ 362.728346][T10646] rock: directory entry would overflow storage [ 362.749687][T10646] rock: sig=0x4654, size=5, remaining=4 [ 363.960594][T10648] loop8: detected capacity change from 0 to 4096 [ 364.221460][T10648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.470683][ T28] audit: type=1400 audit(1782392947.123:1219): avc: denied { write } for pid=10643 comm="syz.8.1616" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 364.605062][T10654] loop7: detected capacity change from 0 to 1024 [ 364.936025][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.953622][T10654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 364.993015][T10654] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.160621][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 365.225912][T10672] loop8: detected capacity change from 0 to 1024 [ 365.282541][T10672] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.412650][T10672] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.1622: Invalid block bitmap block 0 in block_group 0 [ 365.484301][T10672] loop8: lost filesystem error report for type 5 error -117 [ 365.485804][T10672] Quota error (device loop8): write_blk: dquota write failed [ 365.493390][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 365.493500][ C1] EXT4-fs (loop8): initial error at time 1782392948: ext4_read_block_bitmap_nowait:483 [ 365.493598][ C1] EXT4-fs (loop8): last error at time 1782392948: ext4_read_block_bitmap_nowait:483 [ 365.573861][T10684] loop7: detected capacity change from 0 to 164 [ 365.602270][T10684] rock: directory entry would overflow storage [ 365.612812][ T9914] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 365.623050][T10684] rock: sig=0x5252, size=5, remaining=3 [ 365.629069][T10684] isofs_fill_super: root inode is not a directory. Corrupted media? [ 365.636524][T10672] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 365.641928][T10684] loop7: detected capacity change from 0 to 512 [ 365.649855][T10672] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.1622: Failed to acquire dquot type 0 [ 365.730138][T10672] loop8: lost filesystem error report for type 5 error -117 [ 365.746388][T10672] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.1622: Freeing blocks not in datazone - block = 0, count = 4096 [ 365.790654][T10684] EXT4-fs: Ignoring removed nobh option [ 365.820840][T10672] loop8: lost filesystem error report for type 5 error -117 [ 365.838617][T10672] EXT4-fs error (device loop8): ext4_read_inode_bitmap:141: comm syz.8.1622: Invalid inode bitmap blk 0 in block_group 0 [ 365.862387][ T30] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-7 [ 365.880863][ T28] audit: type=1400 audit(1782392948.673:1220): avc: denied { connect } for pid=10686 comm="syz.9.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 365.882897][ T30] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 365.905969][T10672] loop8: lost filesystem error report for type 5 error -117 [ 365.928541][ T30] loop8: lost filesystem error report for type 5 error -117 [ 365.933277][T10672] EXT4-fs error (device loop8) in ext4_free_inode:363: Corrupt filesystem [ 365.967023][T10684] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.008013][T10672] loop8: lost filesystem error report for type 5 error -117 [ 366.009985][T10672] EXT4-fs (loop8): 1 orphan inode deleted [ 366.051909][T10684] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.069409][T10699] xt_hashlimit: size too large, truncated to 1048576 [ 366.079216][T10672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.184027][ T28] audit: type=1400 audit(1782392948.983:1221): avc: denied { write } for pid=10683 comm="syz.7.1623" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 366.264295][ T28] audit: type=1400 audit(1782392949.063:1222): avc: denied { write } for pid=10683 comm="syz.7.1623" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 366.331451][ T28] audit: type=1400 audit(1782392949.063:1223): avc: denied { create } for pid=10683 comm="syz.7.1623" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 366.354132][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.559288][T10698] @ÿ: renamed from bond_slave_0 (while UP) [ 367.053352][T10710] loop7: detected capacity change from 0 to 4096 [ 367.269010][T10710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.328438][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.337477][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.384339][ T28] audit: type=1400 audit(1782392950.083:1224): avc: denied { write } for pid=10707 comm="syz.7.1631" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.939616][T10718] loop9: detected capacity change from 0 to 512 [ 367.969547][T10718] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1633: Unrecognised inode hash code 255 [ 368.165463][T10718] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1633: Corrupt directory, running e2fsck is recommended [ 368.415541][T10718] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 368.424633][T10718] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.1633: corrupted in-inode xattr: e_name out of bounds [ 368.439044][T10718] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 368.441083][T10718] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1633: couldn't read orphan inode 15 (err -117) [ 368.499523][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 368.506012][ C0] EXT4-fs (loop9): initial error at time 1782392951: ext4_iget_extra_inode:5180: inode 15 [ 368.515975][ C0] EXT4-fs (loop9): last error at time 1782392951: ext4_iget_extra_inode:5180: inode 15 [ 368.545637][T10718] loop9: lost filesystem error report for type 5 error -117 [ 368.585478][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.756325][ T28] audit: type=1400 audit(1782392951.553:1225): avc: denied { write } for pid=10712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.793516][T10730] loop8: detected capacity change from 0 to 512 [ 368.810127][T10718] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.840504][T10730] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1634: Unrecognised inode hash code 255 [ 368.864317][T10718] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1633: Unrecognised inode hash code 255 [ 368.875969][T10718] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1633: Corrupt directory, running e2fsck is recommended [ 368.900112][T10718] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1633: Unrecognised inode hash code 255 [ 368.902915][T10730] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1634: Corrupt directory, running e2fsck is recommended [ 368.917378][T10718] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1633: Corrupt directory, running e2fsck is recommended [ 368.958740][T10718] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 4: comm syz.9.1633: path /18/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 369.001455][T10730] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 369.001535][T10730] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.1634: corrupted in-inode xattr: e_name out of bounds [ 369.001598][T10730] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 369.003780][T10730] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1634: couldn't read orphan inode 15 (err -117) [ 369.003884][T10730] loop8: lost filesystem error report for type 5 error -117 [ 369.006135][T10730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.175687][ T9914] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.349017][T10750] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1634: Unrecognised inode hash code 255 [ 369.433261][T10750] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1634: Corrupt directory, running e2fsck is recommended [ 369.537265][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 369.537281][ T28] audit: type=1400 audit(1782392952.333:1229): avc: denied { write } for pid=10753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.584201][T10750] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1634: Unrecognised inode hash code 255 [ 369.632067][ T28] audit: type=1400 audit(1782392952.373:1230): avc: denied { write } for pid=10767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.643726][T10750] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1634: Corrupt directory, running e2fsck is recommended [ 369.754562][T10750] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 4: comm syz.8.1634: path /97/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 369.819448][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.830189][T10750] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 8: comm syz.8.1634: path /97/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 370.035825][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.740882][T10783] loop8: detected capacity change from 0 to 4096 [ 372.048621][T10783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.115170][ T28] audit: type=1400 audit(1782392954.913:1231): avc: denied { write } for pid=10778 comm="syz.8.1639" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.250711][ T28] audit: type=1400 audit(1782392955.053:1232): avc: denied { write } for pid=10784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.438645][ T28] audit: type=1400 audit(1782392955.163:1233): avc: denied { write } for pid=10802 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.497801][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.872425][T10813] loop7: detected capacity change from 0 to 1024 [ 372.939052][T10813] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 373.102464][T10813] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1645: Invalid block bitmap block 0 in block_group 0 [ 373.135070][T10813] loop7: lost filesystem error report for type 5 error -117 [ 373.136224][T10813] Quota error (device loop7): write_blk: dquota write failed [ 373.143773][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 373.143891][ C1] EXT4-fs (loop7): initial error at time 1782392955: ext4_read_block_bitmap_nowait:483 [ 373.144027][ C1] EXT4-fs (loop7): last error at time 1782392955: ext4_read_block_bitmap_nowait:483 [ 373.223656][T10813] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 373.251721][T10813] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1645: Failed to acquire dquot type 0 [ 373.277488][T10813] loop7: lost filesystem error report for type 5 error -117 [ 373.365713][T10813] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.1645: Freeing blocks not in datazone - block = 0, count = 4096 [ 373.386469][T10813] loop7: lost filesystem error report for type 5 error -117 [ 373.493611][T10813] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.1645: Invalid inode bitmap blk 0 in block_group 0 [ 373.519822][T10813] loop7: lost filesystem error report for type 5 error -117 [ 373.520627][T10813] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 373.540886][ T2459] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 373.564539][ T2459] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0 [ 373.592015][T10813] loop7: lost filesystem error report for type 5 error -117 [ 373.593337][T10813] EXT4-fs (loop7): 1 orphan inode deleted [ 373.639846][ T2459] loop7: lost filesystem error report for type 5 error -117 [ 373.644935][T10813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.300806][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.320332][T10828] loop8: detected capacity change from 0 to 512 [ 374.328379][T10828] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.1647: Unrecognised inode hash code 255 [ 374.340262][T10828] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1647: Corrupt directory, running e2fsck is recommended [ 375.394915][T10828] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 375.414906][T10828] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.1647: corrupted in-inode xattr: e_name out of bounds [ 375.588658][T10828] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 375.598536][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 375.614142][ C0] EXT4-fs (loop8): initial error at time 1782392958: ext4_iget_extra_inode:5180: inode 15 [ 375.624109][ C0] EXT4-fs (loop8): last error at time 1782392958: ext4_iget_extra_inode:5180: inode 15 [ 375.646987][T10828] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1647: couldn't read orphan inode 15 (err -117) [ 375.670669][T10828] loop8: lost filesystem error report for type 5 error -117 [ 375.671340][T10828] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.558916][T10840] loop9: detected capacity change from 0 to 4096 [ 376.664484][T10787] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set [ 376.745321][T10838] loop7: detected capacity change from 0 to 4096 [ 377.728715][T10840] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 377.728750][T10840] EXT4-fs: failed to create workqueue [ 377.743660][T10840] EXT4-fs (loop9): mount failed [ 378.552647][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 378.605847][T10838] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 378.608500][T10838] EXT4-fs: failed to create workqueue [ 378.623468][T10838] EXT4-fs (loop7): mount failed [ 378.659442][T10845] l2tp_ppp: sess 2/0: no socket in recv [ 378.867378][T10849] loop2: detected capacity change from 0 to 512 [ 379.010334][T10855] FAULT_INJECTION: forcing a failure. [ 379.010334][T10855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.029434][T10855] CPU: 0 UID: 0 PID: 10855 Comm: syz.9.1655 Not tainted syzkaller #0 PREEMPT(lazy) [ 379.029465][T10855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.029479][T10855] Call Trace: [ 379.029488][T10855] [ 379.029497][T10855] __dump_stack+0x1d/0x30 [ 379.029550][T10855] dump_stack_lvl+0x95/0xd0 [ 379.029573][T10855] dump_stack+0x15/0x1b [ 379.029593][T10855] should_fail_ex+0x25e/0x270 [ 379.029683][T10855] should_fail+0xb/0x20 [ 379.029777][T10855] should_fail_usercopy+0x1a/0x20 [ 379.029901][T10855] _copy_from_iter+0xcc/0xe70 [ 379.029935][T10855] ? __alloc_skb+0x511/0x6f0 [ 379.029961][T10855] ? __alloc_skb+0x205/0x6f0 [ 379.030032][T10855] netlink_sendmsg+0x4a4/0x6f0 [ 379.030059][T10855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.030083][T10855] ____sys_sendmsg+0x532/0x580 [ 379.030116][T10855] ___sys_sendmsg+0x195/0x1e0 [ 379.030214][T10855] __x64_sys_sendmsg+0xd4/0x160 [ 379.030256][T10855] x64_sys_call+0x194c/0x3020 [ 379.030283][T10855] do_syscall_64+0x136/0x3c0 [ 379.030387][T10855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.030410][T10855] RIP: 0033:0x7fbd8190ce59 [ 379.030429][T10855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.030448][T10855] RSP: 002b:00007fbd8033e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.030478][T10855] RAX: ffffffffffffffda RBX: 00007fbd81b86090 RCX: 00007fbd8190ce59 [ 379.030493][T10855] RDX: 0000000000000044 RSI: 00002000000005c0 RDI: 0000000000000005 [ 379.030508][T10855] RBP: 00007fbd8033e090 R08: 0000000000000000 R09: 0000000000000000 [ 379.030522][T10855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.030536][T10855] R13: 00007fbd81b86128 R14: 00007fbd81b86090 R15: 00007ffeb536aa28 [ 379.030558][T10855] [ 379.319061][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.330235][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1658'. [ 379.341021][T10860] netlink: 'syz.9.1658': attribute type 14 has an invalid length. [ 379.367312][T10849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 379.380006][ T5606] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.389004][ T5606] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.397767][ T5606] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.406681][T10849] ext4 filesystem being mounted at /378/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.408024][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1658'. [ 379.426643][T10860] netlink: 'syz.9.1658': attribute type 14 has an invalid length. [ 379.434003][ T5606] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.962312][T10869] loop7: detected capacity change from 0 to 4096 [ 381.272911][T10869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.456534][T10874] bond0: (slave bridge_slave_0): Error: Device is in use and cannot be enslaved [ 381.466667][ T28] audit: type=1400 audit(1782392964.253:1234): avc: denied { read } for pid=10873 comm="syz.1.1660" name="file0" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.628268][ T28] audit: type=1400 audit(1782392964.253:1235): avc: denied { open } for pid=10873 comm="syz.1.1660" path="/23/file0" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 382.521163][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.860336][ T28] audit: type=1400 audit(1782392964.323:1236): avc: denied { write } for pid=10854 comm="syz.7.1656" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 382.906144][T10882] loop9: detected capacity change from 0 to 4096 [ 383.089213][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 383.150974][T10882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.528563][ T28] audit: type=1400 audit(1782392965.983:1237): avc: denied { write } for pid=10877 comm="syz.9.1662" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.441053][T10896] loop8: detected capacity change from 0 to 4096 [ 384.464127][T10896] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.508586][T10889] loop2: detected capacity change from 0 to 512 [ 384.519117][T10889] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1664: Unrecognised inode hash code 255 [ 384.523269][ T28] audit: type=1400 audit(1782392967.283:1238): avc: denied { write } for pid=10890 comm="syz.8.1665" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.530651][T10889] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1664: Corrupt directory, running e2fsck is recommended [ 384.531671][T10889] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 384.589511][T10889] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1664: corrupted in-inode xattr: e_name out of bounds [ 384.641171][T10889] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 384.661763][T10889] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1664: couldn't read orphan inode 15 (err -117) [ 384.682894][T10889] loop2: lost filesystem error report for type 5 error -117 [ 384.687283][T10889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.882955][T10892] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1664: Unrecognised inode hash code 255 [ 384.894692][T10892] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1664: Corrupt directory, running e2fsck is recommended [ 384.908017][T10892] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 4: comm syz.2.1664: path /379/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 384.928807][T10892] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.1664: path /379/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 385.524263][ T9914] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.755391][T10905] loop9: detected capacity change from 0 to 512 [ 385.782389][T10905] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1667: Unrecognised inode hash code 255 [ 385.799871][T10905] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1667: Corrupt directory, running e2fsck is recommended [ 385.887647][T10905] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 385.896866][T10905] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.1667: corrupted in-inode xattr: e_name out of bounds [ 386.653809][T10905] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.655803][T10905] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1667: couldn't read orphan inode 15 (err -117) [ 386.665014][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 386.665034][ C0] EXT4-fs (loop9): initial error at time 1782392969: ext4_iget_extra_inode:5180: inode 15 [ 386.665067][ C0] EXT4-fs (loop9): last error at time 1782392969: ext4_iget_extra_inode:5180: inode 15 [ 386.960364][T10905] loop9: lost filesystem error report for type 5 error -117 [ 386.994046][T10905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.664422][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.696041][T10903] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1667: Unrecognised inode hash code 255 [ 387.707608][T10903] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1667: Corrupt directory, running e2fsck is recommended [ 388.519775][T10911] loop1: detected capacity change from 0 to 4096 [ 389.070354][T10911] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 389.070832][T10911] EXT4-fs: failed to create workqueue [ 389.086126][T10911] EXT4-fs (loop1): mount failed [ 389.118743][T10887] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set [ 389.148391][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.528664][T10917] loop2: detected capacity change from 0 to 4096 [ 390.563354][T10917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.609244][ T28] audit: type=1400 audit(1782392973.383:1239): avc: denied { write } for pid=10914 comm="syz.2.1669" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 390.967166][ T9914] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.984694][T10932] FAULT_INJECTION: forcing a failure. [ 390.984694][T10932] name failslab, interval 1, probability 0, space 0, times 0 [ 391.001610][T10932] CPU: 1 UID: 0 PID: 10932 Comm: syz.8.1670 Not tainted syzkaller #0 PREEMPT(lazy) [ 391.001653][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.001668][T10932] Call Trace: [ 391.001675][T10932] [ 391.001684][T10932] __dump_stack+0x1d/0x30 [ 391.001712][T10932] dump_stack_lvl+0x95/0xd0 [ 391.001752][T10932] dump_stack+0x15/0x1b [ 391.001774][T10932] should_fail_ex+0x25e/0x270 [ 391.001812][T10932] should_failslab+0x8c/0xb0 [ 391.001837][T10932] __kvmalloc_node_noprof+0x15b/0x590 [ 391.001945][T10932] ? bpf_test_run_xdp_live+0x137/0x1330 [ 391.001966][T10932] ? bpf_test_run_xdp_live+0x137/0x1330 [ 391.001986][T10932] ? mutex_unlock+0x81/0x90 [ 391.002007][T10932] bpf_test_run_xdp_live+0x137/0x1330 [ 391.002031][T10932] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 391.002090][T10932] ? __pfx_autoremove_wake_function+0x10/0x10 [ 391.002116][T10932] ? mutex_unlock+0x4e/0x90 [ 391.002138][T10932] ? 0xffffffffa02054c0 [ 391.002219][T10932] ? bpf_dispatcher_change_prog+0x7b7/0x800 [ 391.002251][T10932] ? 0xffffffffa02054c0 [ 391.002278][T10932] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 391.002378][T10932] bpf_prog_test_run_xdp+0x559/0x9e0 [ 391.002403][T10932] ? __rcu_read_unlock+0x4e/0x70 [ 391.002435][T10932] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 391.002469][T10932] bpf_prog_test_run+0x208/0x340 [ 391.002507][T10932] __sys_bpf+0x8da/0xc30 [ 391.002573][T10932] ? vfs_write+0x770/0x990 [ 391.002671][T10932] __x64_sys_bpf+0x69/0x80 [ 391.002704][T10932] x64_sys_call+0x10cb/0x3020 [ 391.002730][T10932] do_syscall_64+0x136/0x3c0 [ 391.002763][T10932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.002849][T10932] RIP: 0033:0x7f80a470ce59 [ 391.002867][T10932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.002907][T10932] RSP: 002b:00007f80a3167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.002932][T10932] RAX: ffffffffffffffda RBX: 00007f80a4985fa0 RCX: 00007f80a470ce59 [ 391.002948][T10932] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 391.002965][T10932] RBP: 00007f80a3167090 R08: 0000000000000000 R09: 0000000000000000 [ 391.002980][T10932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.002995][T10932] R13: 00007f80a4986038 R14: 00007f80a4985fa0 R15: 00007ffd91fa5968 [ 391.003017][T10932] [ 391.006125][T10930] loop1: detected capacity change from 0 to 1024 [ 391.131880][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1673'. [ 391.140263][T10930] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 391.277827][T10930] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1674: Invalid block bitmap block 0 in block_group 0 [ 391.291420][T10930] loop1: lost filesystem error report for type 5 error -117 [ 391.295290][T10930] Quota error (device loop1): write_blk: dquota write failed [ 391.310004][T10930] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 391.319923][T10930] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1674: Failed to acquire dquot type 0 [ 391.331129][T10930] loop1: lost filesystem error report for type 5 error -117 [ 391.331374][T10930] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.1674: Freeing blocks not in datazone - block = 0, count = 4096 [ 391.358680][T10930] loop1: lost filesystem error report for type 5 error -117 [ 391.361294][T10930] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.1674: Invalid inode bitmap blk 0 in block_group 0 [ 391.376451][ C0] EXT4-fs (loop1): error count since last fsck: 3 [ 391.388540][ C0] EXT4-fs (loop1): initial error at time 1782392974: ext4_read_block_bitmap_nowait:483 [ 391.398204][ C0] EXT4-fs (loop1): last error at time 1782392974: ext4_free_blocks:6718 [ 391.401669][T10930] loop1: lost filesystem error report for type 5 error -117 [ 391.411040][ T8444] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 391.434899][ T8444] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:15: Failed to release dquot type 0 [ 391.458040][ T8444] loop1: lost filesystem error report for type 5 error -117 [ 391.480988][T10930] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 391.498445][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.509854][T10930] loop1: lost filesystem error report for type 5 error -117 [ 391.524880][T10930] EXT4-fs (loop1): 1 orphan inode deleted [ 391.545409][T10930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.441800][T10951] loop8: detected capacity change from 0 to 4096 [ 393.610162][T10950] loop7: detected capacity change from 0 to 4096 [ 394.690398][T10951] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 394.690429][T10951] EXT4-fs: failed to create workqueue [ 394.705365][T10951] EXT4-fs (loop8): mount failed [ 395.691077][T10950] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 395.695506][T10950] EXT4-fs: failed to create workqueue [ 395.720775][T10950] EXT4-fs (loop7): mount failed [ 396.813531][T10971] loop2: detected capacity change from 0 to 4096 [ 397.089859][T10981] sctp: [Deprecated]: syz.9.1683 (pid 10981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.089859][T10981] Use struct sctp_sack_info instead [ 397.298122][T10987] FAULT_INJECTION: forcing a failure. [ 397.298122][T10987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.345782][T10987] CPU: 1 UID: 0 PID: 10987 Comm: syz.7.1686 Not tainted syzkaller #0 PREEMPT(lazy) [ 397.345895][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.345910][T10987] Call Trace: [ 397.345919][T10987] [ 397.345929][T10987] __dump_stack+0x1d/0x30 [ 397.346032][T10987] dump_stack_lvl+0x95/0xd0 [ 397.346054][T10987] dump_stack+0x15/0x1b [ 397.346074][T10987] should_fail_ex+0x25e/0x270 [ 397.346105][T10987] should_fail+0xb/0x20 [ 397.346133][T10987] should_fail_usercopy+0x1a/0x20 [ 397.346264][T10987] _copy_from_user+0x1c/0xb0 [ 397.346302][T10987] do_seccomp+0x27c/0xa40 [ 397.346360][T10987] ? fput+0x8f/0xc0 [ 397.346389][T10987] ? ksys_write+0x194/0x1a0 [ 397.346413][T10987] __x64_sys_seccomp+0x40/0x50 [ 397.346438][T10987] x64_sys_call+0x3f9/0x3020 [ 397.346535][T10987] do_syscall_64+0x136/0x3c0 [ 397.346644][T10987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.346665][T10987] RIP: 0033:0x7f774bfcce59 [ 397.346682][T10987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.346749][T10987] RSP: 002b:00007f774a9fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 397.346772][T10987] RAX: ffffffffffffffda RBX: 00007f774c246090 RCX: 00007f774bfcce59 [ 397.346787][T10987] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 397.346800][T10987] RBP: 00007f774a9fe090 R08: 0000000000000000 R09: 0000000000000000 [ 397.346875][T10987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.346890][T10987] R13: 00007f774c246128 R14: 00007f774c246090 R15: 00007ffd1e83ad48 [ 397.346914][T10987] [ 397.668716][T10971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.730875][ T28] audit: type=1400 audit(1782392980.533:1240): avc: denied { write } for pid=10964 comm="syz.2.1680" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.760011][ T9959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.816974][T10995] loop1: detected capacity change from 0 to 512 [ 397.837224][T10995] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 397.874107][T10995] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1688: bad orphan inode 131083 [ 397.955400][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.960145][T10995] loop1: lost filesystem error report for type 5 error -117 [ 397.977353][T10995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.015188][T10993] loop7: detected capacity change from 0 to 1024 [ 398.990295][T10993] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 399.673398][T11003] sctp: [Deprecated]: syz.2.1691 (pid 11003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.673398][T11003] Use struct sctp_sack_info instead [ 399.752100][T11002] loop9: detected capacity change from 0 to 4096 [ 399.871853][ T9959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.890457][T10993] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1689: Invalid block bitmap block 0 in block_group 0 [ 399.935803][T10993] loop7: lost filesystem error report for type 5 error -117 [ 399.937807][T10993] Quota error (device loop7): write_blk: dquota write failed [ 399.945348][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 399.945500][ C1] EXT4-fs (loop7): initial error at time 1782392982: ext4_read_block_bitmap_nowait:483 [ 399.945587][ C1] EXT4-fs (loop7): last error at time 1782392982: ext4_read_block_bitmap_nowait:483 [ 400.019090][T11002] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.089682][T10993] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 400.168956][T10993] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1689: Failed to acquire dquot type 0 [ 400.180682][T10993] loop7: lost filesystem error report for type 5 error -117 [ 400.181750][T10993] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.1689: Freeing blocks not in datazone - block = 0, count = 4096 [ 400.221452][T10993] loop7: lost filesystem error report for type 5 error -117 [ 400.223728][T10993] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.1689: Invalid inode bitmap blk 0 in block_group 0 [ 400.246890][ T30] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 400.260408][ T30] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 400.283750][T10993] loop7: lost filesystem error report for type 5 error -117 [ 400.284901][T10993] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem [ 400.301212][ T30] loop7: lost filesystem error report for type 5 error -117 [ 400.351165][ T28] audit: type=1400 audit(1782392983.153:1241): avc: denied { write } for pid=10996 comm="syz.9.1690" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 400.356139][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1694'. [ 400.395186][T10993] loop7: lost filesystem error report for type 5 error -117 [ 400.415582][T10993] EXT4-fs (loop7): 1 orphan inode deleted [ 400.724964][T10993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.791916][T11020] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1696'. [ 400.934088][ T9914] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.958818][ T28] audit: type=1400 audit(1782392983.753:1242): avc: denied { nlmsg_read } for pid=11019 comm="syz.8.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 401.124713][T11020] loop8: detected capacity change from 0 to 512 [ 401.221786][T11020] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.1696: attempt to clear invalid blocks 2 len 1 [ 401.287146][T11020] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 401.288482][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 401.304111][ C0] EXT4-fs (loop8): initial error at time 1782392984: ext4_clear_blocks:876: inode 13 [ 401.313642][ C0] EXT4-fs (loop8): last error at time 1782392984: ext4_clear_blocks:876: inode 13 [ 401.324934][ T28] audit: type=1400 audit(1782392984.123:1243): avc: denied { sqpoll } for pid=11029 comm="syz.9.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 401.325282][T11020] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 401.463169][T11020] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1696: invalid indirect mapped block 1819239214 (level 0) [ 401.496109][T11024] loop2: detected capacity change from 0 to 1024 [ 401.538404][T11020] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 401.539483][T11020] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1696: invalid indirect mapped block 1819239214 (level 1) [ 401.567043][T11032] loop9: detected capacity change from 0 to 1024 [ 401.630428][T11024] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 401.648674][T11020] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 401.650376][T11020] EXT4-fs (loop8): 1 truncate cleaned up [ 401.680176][T11020] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.693620][ T5944] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.703073][T11032] EXT4-fs: test_dummy_encryption option not supported [ 401.721141][T11016] ================================================================== [ 401.729347][T11016] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 401.736386][T11016] [ 401.738712][T11016] read-write to 0xffff88811afb8364 of 4 bytes by task 11009 on cpu 0: [ 401.746952][T11016] fifo_open+0x89/0x5b0 [ 401.751183][T11016] do_dentry_open+0x49f/0xa60 [ 401.756008][T11016] vfs_open+0x37/0x1e0 [ 401.760088][T11016] path_openat+0x1b39/0x2000 [ 401.764715][T11016] do_file_open_root+0x233/0x430 [ 401.769696][T11016] file_open_root+0xfd/0x130 [ 401.774318][T11016] do_handle_open+0x6d2/0x7b0 [ 401.779019][T11016] __x64_sys_open_by_handle_at+0x44/0x50 [ 401.784684][T11016] x64_sys_call+0x153d/0x3020 [ 401.789384][T11016] do_syscall_64+0x136/0x3c0 [ 401.793995][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.799898][T11016] [ 401.802230][T11016] read to 0xffff88811afb8364 of 4 bytes by task 11016 on cpu 1: [ 401.809870][T11016] wait_for_partner+0xc9/0x1d0 [ 401.814653][T11016] fifo_open+0x443/0x5b0 [ 401.818915][T11016] do_dentry_open+0x49f/0xa60 [ 401.823614][T11016] vfs_open+0x37/0x1e0 [ 401.827710][T11016] path_openat+0x1b39/0x2000 [ 401.832321][T11016] do_file_open+0x16c/0x290 [ 401.836853][T11016] do_sys_openat2+0xa0/0x130 [ 401.841473][T11016] __x64_sys_openat+0xf2/0x120 [ 401.846271][T11016] x64_sys_call+0x1e39/0x3020 [ 401.850973][T11016] do_syscall_64+0x136/0x3c0 [ 401.855596][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.861513][T11016] [ 401.863851][T11016] value changed: 0x00000001 -> 0x00000002 [ 401.869574][T11016] [ 401.871997][T11016] Reported by Kernel Concurrency Sanitizer on: [ 401.878157][T11016] CPU: 1 UID: 0 PID: 11016 Comm: syz.1.1692 Not tainted syzkaller #0 PREEMPT(lazy) [ 401.887544][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.897708][T11016] ================================================================== [ 401.980877][T11020] capability: warning: `syz.8.1696' uses 32-bit capabilities (legacy support in use) [ 401.985877][T11024] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1698: Invalid block bitmap block 0 in block_group 0 [ 402.086146][T11024] loop2: lost filesystem error report for type 5 error -117 [ 402.088478][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 402.102355][ C1] EXT4-fs (loop2): initial error at time 1782392984: ext4_read_block_bitmap_nowait:483 [ 402.112157][ C1] EXT4-fs (loop2): last error at time 1782392984: ext4_read_block_bitmap_nowait:483 [ 402.131588][T11024] Quota error (device loop2): write_blk: dquota write failed [ 402.133325][T11035] loop7: detected capacity change from 0 to 128 [ 402.151307][T11024] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 402.163601][ T7660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.179809][T11024] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1698: Failed to acquire dquot type 0 [ 402.274945][T11024] loop2: lost filesystem error report for type 5 error -117 [ 402.276801][T11024] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1698: Freeing blocks not in datazone - block = 0, count = 4096 [ 402.300373][T11024] loop2: lost filesystem error report for type 5 error -117 [ 402.313372][T11024] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1698: Invalid inode bitmap blk 0 in block_group 0 [ 402.337191][ T30] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 402.356330][T11024] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 402.371450][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 402.383591][T11024] EXT4-fs (loop2): 1 orphan inode deleted [ 402.409248][T11024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.761112][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.